diff --git a/data/2020/9xxx/CVE-2020-9709.json b/data/2020/9xxx/CVE-2020-9709.json index 10ee0086d3..ae75af6461 100644 --- a/data/2020/9xxx/CVE-2020-9709.json +++ b/data/2020/9xxx/CVE-2020-9709.json @@ -6,7 +6,7 @@ "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "state": "PUBLISHED", "dateReserved": "2020-03-02T00:00:00.000Z", - "dateUpdated": "2026-11-06T18:19:55.255Z", + "dateUpdated": "2026-11-10T18:26:48.063Z", "assignerShortName": "adobe", "datePublished": "2026-11-06T18:19:55.255Z" }, @@ -57,6 +57,68 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-269", + "lang": "en", + "description": "CWE-269 Improper Privilege Management" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "NETWORK", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "REQUIRED", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:25:23.998828Z", + "id": "CVE-2020-9709", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:26:48.063Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/100xxx/CVE-2026-100204.json b/data/2026/100xxx/CVE-2026-100204.json new file mode 100644 index 0000000000..25df283194 --- /dev/null +++ b/data/2026/100xxx/CVE-2026-100204.json @@ -0,0 +1,111 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-100204", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-25T15:11:44.539Z", + "datePublished": "2026-11-10T18:15:06.246Z", + "dateUpdated": "2026-11-10T18:15:06.246Z" + }, + "containers": { + "cna": { + "title": "HEIF Image Extensions Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:heif_image_extension:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "1.2.62.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "HEIF Image Extension", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "1.2.62.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:06.246Z" + }, + "references": [ + { + "name": "HEIF Image Extensions Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100204" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/100xxx/CVE-2026-100223.json b/data/2026/100xxx/CVE-2026-100223.json new file mode 100644 index 0000000000..6114e6e283 --- /dev/null +++ b/data/2026/100xxx/CVE-2026-100223.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-100223", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-25T15:11:44.541Z", + "datePublished": "2026-11-10T18:15:26.361Z", + "dateUpdated": "2026-11-10T18:15:26.361Z" + }, + "containers": { + "cna": { + "title": "Windows NTFS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system.\nTo exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.\nThe security update addresses the vulnerability by preventing sandboxed processes from creating reparse points targeting inaccessible files.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:26.361Z" + }, + "references": [ + { + "name": "Windows NTFS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100223" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/102xxx/CVE-2026-102200.json b/data/2026/102xxx/CVE-2026-102200.json new file mode 100644 index 0000000000..3f0bacdb59 --- /dev/null +++ b/data/2026/102xxx/CVE-2026-102200.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-102200", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-28T18:20:51.763Z", + "datePublished": "2026-11-10T18:15:26.957Z", + "dateUpdated": "2026-11-10T18:15:26.957Z" + }, + "containers": { + "cna": { + "title": "Windows NTFS Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:26.957Z" + }, + "references": [ + { + "name": "Windows NTFS Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102200" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/102xxx/CVE-2026-102219.json b/data/2026/102xxx/CVE-2026-102219.json new file mode 100644 index 0000000000..6ea542fd71 --- /dev/null +++ b/data/2026/102xxx/CVE-2026-102219.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-102219", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-28T18:28:18.685Z", + "datePublished": "2026-11-10T18:20:04.961Z", + "dateUpdated": "2026-11-10T18:20:04.961Z" + }, + "containers": { + "cna": { + "title": "Windows Modern Device Management (MDM) Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inadequate encryption strength in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-326: Inadequate Encryption Strength", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-326" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:04.961Z" + }, + "references": [ + { + "name": "Windows Modern Device Management (MDM) Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102219" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/102xxx/CVE-2026-102224.json b/data/2026/102xxx/CVE-2026-102224.json new file mode 100644 index 0000000000..714f31c6d0 --- /dev/null +++ b/data/2026/102xxx/CVE-2026-102224.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-102224", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-28T18:28:18.685Z", + "datePublished": "2026-11-10T18:15:19.386Z", + "dateUpdated": "2026-11-10T18:15:19.386Z" + }, + "containers": { + "cna": { + "title": "Azure CycleCloud Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "8.10.1" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure CycleCloud 8.9.1", + "versions": [ + { + "version": "1.0.0", + "lessThan": "8.10.1", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-78" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:19.386Z" + }, + "references": [ + { + "name": "Azure CycleCloud Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102224" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.4, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/102xxx/CVE-2026-102230.json b/data/2026/102xxx/CVE-2026-102230.json new file mode 100644 index 0000000000..9bd1cc315c --- /dev/null +++ b/data/2026/102xxx/CVE-2026-102230.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-102230", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-28T18:28:18.685Z", + "datePublished": "2026-11-10T18:19:21.754Z", + "dateUpdated": "2026-11-10T18:19:21.754Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Visual Studio Code allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:21.754Z" + }, + "references": [ + { + "name": "Visual Studio Code Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102230" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.4, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/102xxx/CVE-2026-102236.json b/data/2026/102xxx/CVE-2026-102236.json new file mode 100644 index 0000000000..06578110b9 --- /dev/null +++ b/data/2026/102xxx/CVE-2026-102236.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-102236", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-28T18:28:18.686Z", + "datePublished": "2026-11-10T18:15:18.864Z", + "dateUpdated": "2026-11-10T18:15:18.864Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1021: Improper Restriction of Rendered UI Layers or Frames", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1021" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:18.864Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102236" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.6, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/102xxx/CVE-2026-102868.json b/data/2026/102xxx/CVE-2026-102868.json new file mode 100644 index 0000000000..f21cc0ad25 --- /dev/null +++ b/data/2026/102xxx/CVE-2026-102868.json @@ -0,0 +1,191 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-102868", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-29T17:27:07.499Z", + "datePublished": "2026-11-10T18:14:59.628Z", + "dateUpdated": "2026-11-10T18:14:59.628Z" + }, + "containers": { + "cna": { + "title": "Windows Shell Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9445" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9445" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9445", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9445", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:14:59.628Z" + }, + "references": [ + { + "name": "Windows Shell Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102868" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/103xxx/CVE-2026-103571.json b/data/2026/103xxx/CVE-2026-103571.json new file mode 100644 index 0000000000..9ed99ea860 --- /dev/null +++ b/data/2026/103xxx/CVE-2026-103571.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-103571", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-30T20:48:29.840Z", + "datePublished": "2026-11-10T18:20:00.083Z", + "dateUpdated": "2026-11-10T18:20:00.083Z" + }, + "containers": { + "cna": { + "title": "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.\nTo exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.\nThe security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:00.083Z" + }, + "references": [ + { + "name": "Windows CNG Key Isolation Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103571" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105017.json b/data/2026/105xxx/CVE-2026-105017.json new file mode 100644 index 0000000000..6c258bb6ca --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105017.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105017", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:22.258Z", + "dateUpdated": "2026-11-10T18:19:22.258Z" + }, + "containers": { + "cna": { + "title": "Volume Shadow Copy Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Volume Shadow Copy allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:22.258Z" + }, + "references": [ + { + "name": "Volume Shadow Copy Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105017" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105018.json b/data/2026/105xxx/CVE-2026-105018.json new file mode 100644 index 0000000000..5915776f97 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105018.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105018", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:22.850Z", + "dateUpdated": "2026-11-10T18:19:22.850Z" + }, + "containers": { + "cna": { + "title": "Windows Partition Management Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:22.850Z" + }, + "references": [ + { + "name": "Windows Partition Management Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105018" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105020.json b/data/2026/105xxx/CVE-2026-105020.json new file mode 100644 index 0000000000..9813992442 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105020.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105020", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:23.366Z", + "dateUpdated": "2026-11-10T18:19:23.366Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:23.366Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105020" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105021.json b/data/2026/105xxx/CVE-2026-105021.json new file mode 100644 index 0000000000..36c75cd2e6 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105021.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105021", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:23.810Z", + "dateUpdated": "2026-11-10T18:19:23.810Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:23.810Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105021" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105022.json b/data/2026/105xxx/CVE-2026-105022.json new file mode 100644 index 0000000000..2254871ce7 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105022.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105022", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:24.412Z", + "dateUpdated": "2026-11-10T18:19:24.412Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:24.412Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105022" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105023.json b/data/2026/105xxx/CVE-2026-105023.json new file mode 100644 index 0000000000..a61de1e7c1 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105023.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105023", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:24.931Z", + "dateUpdated": "2026-11-10T18:19:24.931Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:24.931Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105023" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105024.json b/data/2026/105xxx/CVE-2026-105024.json new file mode 100644 index 0000000000..8378715beb --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105024.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105024", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:25.441Z", + "dateUpdated": "2026-11-10T18:19:25.441Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:25.441Z" + }, + "references": [ + { + "name": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105024" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105025.json b/data/2026/105xxx/CVE-2026-105025.json new file mode 100644 index 0000000000..5bd7ebbf60 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105025.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105025", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:25.966Z", + "dateUpdated": "2026-11-10T18:19:25.966Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:25.966Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105025" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105026.json b/data/2026/105xxx/CVE-2026-105026.json new file mode 100644 index 0000000000..f44550f8a7 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105026.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105026", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:26.411Z", + "dateUpdated": "2026-11-10T18:19:26.411Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:26.411Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105026" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105028.json b/data/2026/105xxx/CVE-2026-105028.json new file mode 100644 index 0000000000..c236d74a4f --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105028.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105028", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-02T20:51:38.832Z", + "datePublished": "2026-11-10T18:19:26.942Z", + "dateUpdated": "2026-11-10T18:19:26.942Z" + }, + "containers": { + "cna": { + "title": "Windows Win32k Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:26.942Z" + }, + "references": [ + { + "name": "Windows Win32k Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105028" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105437.json b/data/2026/105xxx/CVE-2026-105437.json new file mode 100644 index 0000000000..c0e7ec01f8 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105437.json @@ -0,0 +1,157 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105437", + "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", + "state": "PUBLISHED", + "assignerShortName": "GitLab", + "dateReserved": "2026-10-05T13:05:02.346Z", + "datePublished": "2026-11-10T18:34:09.369Z", + "dateUpdated": "2026-11-10T18:34:09.369Z" + }, + "containers": { + "cna": { + "title": "Heap-based Buffer Overflow in Git", + "descriptions": [ + { + "lang": "en", + "value": "Affected versions of Git have a heap buffer overflow in the three-way merge\ncode (xdiff), which an attacker can trigger through a repository they\ncontrol.\n\nWhen Git merges a file, it first adds up the size of the merged\noutput, allocates a buffer of that size, and then writes the output into\nit. That total was kept in a 32-bit signed integer. The\nconflict-marker-size attribute, which can be set from a committed\n.gitattributes file, accepts any positive integer, and the markers are\nwritten several times for every conflict. A small file with a huge marker\nsize and many separate conflicts can therefore push the total past 4 GiB,\nso the integer wraps to a small value and Git writes attacker-controlled\nmerge output past the end of a buffer that is too small. At minimum this\ncrashes Git, and because the overflow is large and its contents are largely\nattacker-controlled, worse heap corruption is possible.\n\nAny command that does a textual three-way merge can trigger it, such\nas git-merge(1), git-rebase(1), git-cherry-pick(1), and\ngit-merge-tree(1). The latter is most likely a target for Git forges,\nwhich might use git-merge-tree(1) on the server-side to check\nmergeability. When the server reads attributes from trees in the\nrepository (for example through attr.tree or --attr-source), any\nuser who can push branches and request that they be merged (for\nexample by opening a pull or merge request) can trigger the overflow\nwithout anyone else doing anything, and the data they push is small\nbecause the oversized output only appears during the merge.\n\nThe problem has been patched by computing the size as size_t and\nchecking every addition for overflow, so Git stops with an error\ninstead of overflowing.\n\nServers that cannot upgrade right away can add\n\n* conflict-marker-size=7\n\nto each repository's info/attributes as a workaround, which overrides\nany in-tree .gitattributes, or turn off server-side mergeability checks for\nuntrusted repositories." + } + ], + "affected": [ + { + "vendor": "Git", + "product": "Git", + "repo": "https://gitlab.com/git-scm/git", + "cpes": [ + "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*" + ], + "versions": [ + { + "version": "0", + "status": "affected", + "lessThan": "2.49.1", + "versionType": "semver" + }, + { + "version": "2.50.0-rc0", + "status": "affected", + "lessThan": "2.50.2", + "versionType": "semver" + }, + { + "version": "2.51.0-rc0", + "status": "affected", + "lessThan": "2.51.3", + "versionType": "semver" + }, + { + "version": "2.52.0-rc0", + "status": "affected", + "lessThan": "2.52.1", + "versionType": "semver" + }, + { + "version": "2.53.0-rc0", + "status": "affected", + "lessThan": "2.53.1", + "versionType": "semver" + }, + { + "version": "2.54.0-rc0", + "status": "affected", + "lessThan": "2.54.1", + "versionType": "semver" + }, + { + "version": "2.55.0-rc0", + "status": "affected", + "lessThan": "2.55.1", + "versionType": "semver" + }, + { + "version": "2.56.0-rc0", + "status": "affected", + "lessThan": "2.56.1", + "versionType": "semver" + } + ], + "defaultStatus": "unaffected" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "lang": "en", + "description": "CWE-122: Heap-based Buffer Overflow", + "cweId": "CWE-122", + "type": "CWE" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/gitlab-org/git/-/work_items/814" + }, + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/work_items/632121" + }, + { + "url": "https://hackerone.com/reports/4044249", + "name": "HackerOne Bug Bounty Report #4044249", + "tags": [ + "technical-description", + "exploit", + "permissions-required" + ] + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH" + } + } + ], + "solutions": [ + { + "lang": "en", + "value": "Upgrade to versions 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1, 2.55.1, 2.56.1 or above." + } + ], + "credits": [ + { + "lang": "en", + "value": "Thanks [taise](https://hackerone.com/taise) for reporting this vulnerability through HackerOne", + "type": "finder" + } + ], + "providerMetadata": { + "orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", + "shortName": "GitLab", + "dateUpdated": "2026-11-10T18:34:09.369Z" + } + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105490.json b/data/2026/105xxx/CVE-2026-105490.json new file mode 100644 index 0000000000..1396bb13bf --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105490.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105490", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.210Z", + "datePublished": "2026-11-10T18:19:27.539Z", + "dateUpdated": "2026-11-10T18:19:27.539Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:27.539Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105490" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105491.json b/data/2026/105xxx/CVE-2026-105491.json new file mode 100644 index 0000000000..3b28032e57 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105491.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105491", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.210Z", + "datePublished": "2026-11-10T18:19:28.064Z", + "dateUpdated": "2026-11-10T18:19:28.064Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:28.064Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105491" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105492.json b/data/2026/105xxx/CVE-2026-105492.json new file mode 100644 index 0000000000..095f1f0a87 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105492.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105492", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.210Z", + "datePublished": "2026-11-10T18:19:28.577Z", + "dateUpdated": "2026-11-10T18:19:28.577Z" + }, + "containers": { + "cna": { + "title": "Microsoft Remote Registry Service Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:28.577Z" + }, + "references": [ + { + "name": "Microsoft Remote Registry Service Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105492" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105493.json b/data/2026/105xxx/CVE-2026-105493.json new file mode 100644 index 0000000000..c9206231db --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105493.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105493", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.210Z", + "datePublished": "2026-11-10T18:19:29.018Z", + "dateUpdated": "2026-11-10T18:19:29.018Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:29.018Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105493" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105494.json b/data/2026/105xxx/CVE-2026-105494.json new file mode 100644 index 0000000000..f8d5be5744 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105494.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105494", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.210Z", + "datePublished": "2026-11-10T18:21:37.970Z", + "dateUpdated": "2026-11-10T18:21:37.970Z" + }, + "containers": { + "cna": { + "title": "Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:aznfs:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "3.0.20" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "aznfs", + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "3.0.20", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted search path in Azure NFS mount helper (aznfs) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-426: Untrusted Search Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-426" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:37.970Z" + }, + "references": [ + { + "name": "Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105494" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105495.json b/data/2026/105xxx/CVE-2026-105495.json new file mode 100644 index 0000000000..3a3308a087 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105495.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105495", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.210Z", + "datePublished": "2026-11-10T18:19:29.624Z", + "dateUpdated": "2026-11-10T18:19:29.624Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:29.624Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105495" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105496.json b/data/2026/105xxx/CVE-2026-105496.json new file mode 100644 index 0000000000..4039c921d8 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105496.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105496", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:30.219Z", + "dateUpdated": "2026-11-10T18:19:30.219Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:30.219Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105496" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105497.json b/data/2026/105xxx/CVE-2026-105497.json new file mode 100644 index 0000000000..d98d1bf729 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105497.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105497", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:30.819Z", + "dateUpdated": "2026-11-10T18:19:30.819Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:30.819Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105497" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105498.json b/data/2026/105xxx/CVE-2026-105498.json new file mode 100644 index 0000000000..e368931351 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105498.json @@ -0,0 +1,392 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105498", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:31.329Z", + "dateUpdated": "2026-11-10T18:19:31.329Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:31.329Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105498" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105499.json b/data/2026/105xxx/CVE-2026-105499.json new file mode 100644 index 0000000000..4dfbd66b00 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105499.json @@ -0,0 +1,392 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105499", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:31.771Z", + "dateUpdated": "2026-11-10T18:19:31.771Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:31.771Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105499" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105501.json b/data/2026/105xxx/CVE-2026-105501.json new file mode 100644 index 0000000000..513b23a2ab --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105501.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105501", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:32.293Z", + "dateUpdated": "2026-11-10T18:19:32.293Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:32.293Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105501" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105503.json b/data/2026/105xxx/CVE-2026-105503.json new file mode 100644 index 0000000000..ba443dd3eb --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105503.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105503", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:32.806Z", + "dateUpdated": "2026-11-10T18:19:32.806Z" + }, + "containers": { + "cna": { + "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:32.806Z" + }, + "references": [ + { + "name": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105503" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105504.json b/data/2026/105xxx/CVE-2026-105504.json new file mode 100644 index 0000000000..0fbb82d9c7 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105504.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105504", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:33.334Z", + "dateUpdated": "2026-11-10T18:19:33.334Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.\nTo exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.\nThe security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:33.334Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105504" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105505.json b/data/2026/105xxx/CVE-2026-105505.json new file mode 100644 index 0000000000..542aca2769 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105505.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105505", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:33.794Z", + "dateUpdated": "2026-11-10T18:19:33.794Z" + }, + "containers": { + "cna": { + "title": "Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-23: Relative Path Traversal", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-23" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:33.794Z" + }, + "references": [ + { + "name": "Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105505" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105506.json b/data/2026/105xxx/CVE-2026-105506.json new file mode 100644 index 0000000000..4cbbad650b --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105506.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105506", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:34.298Z", + "dateUpdated": "2026-11-10T18:19:34.298Z" + }, + "containers": { + "cna": { + "title": "Windows Shell Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:34.298Z" + }, + "references": [ + { + "name": "Windows Shell Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105506" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105507.json b/data/2026/105xxx/CVE-2026-105507.json new file mode 100644 index 0000000000..5def8b66c8 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105507.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105507", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.211Z", + "datePublished": "2026-11-10T18:19:34.874Z", + "dateUpdated": "2026-11-10T18:19:34.874Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.\nA locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nThe security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:34.874Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105507" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105509.json b/data/2026/105xxx/CVE-2026-105509.json new file mode 100644 index 0000000000..6536c65e85 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105509.json @@ -0,0 +1,111 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105509", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.212Z", + "datePublished": "2026-11-10T18:18:58.524Z", + "dateUpdated": "2026-11-10T18:18:58.524Z" + }, + "containers": { + "cna": { + "title": "Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:58.524Z" + }, + "references": [ + { + "name": "Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105509" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105510.json b/data/2026/105xxx/CVE-2026-105510.json new file mode 100644 index 0000000000..6ed73d1349 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105510.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105510", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.212Z", + "datePublished": "2026-11-10T18:19:35.477Z", + "dateUpdated": "2026-11-10T18:19:35.477Z" + }, + "containers": { + "cna": { + "title": "Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:35.477Z" + }, + "references": [ + { + "name": "Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105510" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105511.json b/data/2026/105xxx/CVE-2026-105511.json new file mode 100644 index 0000000000..000d413e00 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105511.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105511", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.212Z", + "datePublished": "2026-11-10T18:18:59.082Z", + "dateUpdated": "2026-11-10T18:18:59.082Z" + }, + "containers": { + "cna": { + "title": "Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:59.082Z" + }, + "references": [ + { + "name": "Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105511" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105512.json b/data/2026/105xxx/CVE-2026-105512.json new file mode 100644 index 0000000000..295dbcc3af --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105512.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105512", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.212Z", + "datePublished": "2026-11-10T18:19:36.084Z", + "dateUpdated": "2026-11-10T18:19:36.084Z" + }, + "containers": { + "cna": { + "title": "Microsoft QUIC Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:36.084Z" + }, + "references": [ + { + "name": "Microsoft QUIC Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105512" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105513.json b/data/2026/105xxx/CVE-2026-105513.json new file mode 100644 index 0000000000..9d377d30a1 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105513.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105513", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.212Z", + "datePublished": "2026-11-10T18:19:36.663Z", + "dateUpdated": "2026-11-10T18:19:36.663Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.\nTo exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.\nThe security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:36.663Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105513" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105515.json b/data/2026/105xxx/CVE-2026-105515.json new file mode 100644 index 0000000000..e0c07467e8 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105515.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105515", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:42:58.212Z", + "datePublished": "2026-11-10T18:19:37.243Z", + "dateUpdated": "2026-11-10T18:19:37.243Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:37.243Z" + }, + "references": [ + { + "name": "Windows Message Queuing Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105515" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105518.json b/data/2026/105xxx/CVE-2026-105518.json new file mode 100644 index 0000000000..1c3f00f1be --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105518.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105518", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:37.748Z", + "dateUpdated": "2026-11-10T18:19:37.748Z" + }, + "containers": { + "cna": { + "title": "Windows iSCSI Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:37.748Z" + }, + "references": [ + { + "name": "Windows iSCSI Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105518" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105520.json b/data/2026/105xxx/CVE-2026-105520.json new file mode 100644 index 0000000000..381a71fd03 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105520.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105520", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:38.252Z", + "dateUpdated": "2026-11-10T18:19:38.252Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:38.252Z" + }, + "references": [ + { + "name": "Windows DNS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105520" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105522.json b/data/2026/105xxx/CVE-2026-105522.json new file mode 100644 index 0000000000..ec31e23f81 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105522.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105522", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:38.768Z", + "dateUpdated": "2026-11-10T18:19:38.768Z" + }, + "containers": { + "cna": { + "title": "Winlogon Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Winlogon allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:38.768Z" + }, + "references": [ + { + "name": "Winlogon Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105522" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105524.json b/data/2026/105xxx/CVE-2026-105524.json new file mode 100644 index 0000000000..00ffbb7676 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105524.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105524", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:39.355Z", + "dateUpdated": "2026-11-10T18:19:39.355Z" + }, + "containers": { + "cna": { + "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:39.355Z" + }, + "references": [ + { + "name": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105524" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105525.json b/data/2026/105xxx/CVE-2026-105525.json new file mode 100644 index 0000000000..18ea01b46b --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105525.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105525", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:39.864Z", + "dateUpdated": "2026-11-10T18:19:39.864Z" + }, + "containers": { + "cna": { + "title": "Windows Network Connection Broker Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:39.864Z" + }, + "references": [ + { + "name": "Windows Network Connection Broker Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105525" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105526.json b/data/2026/105xxx/CVE-2026-105526.json new file mode 100644 index 0000000000..d40da07252 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105526.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105526", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:40.450Z", + "dateUpdated": "2026-11-10T18:19:40.450Z" + }, + "containers": { + "cna": { + "title": "Winsock Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Winsock allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:40.450Z" + }, + "references": [ + { + "name": "Winsock Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105526" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105527.json b/data/2026/105xxx/CVE-2026-105527.json new file mode 100644 index 0000000000..9fdaff4772 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105527.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105527", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:41.218Z", + "dateUpdated": "2026-11-10T18:19:41.218Z" + }, + "containers": { + "cna": { + "title": "Windows Encrypting File System (EFS) Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny service locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:41.218Z" + }, + "references": [ + { + "name": "Windows Encrypting File System (EFS) Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105527" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105528.json b/data/2026/105xxx/CVE-2026-105528.json new file mode 100644 index 0000000000..baa911709f --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105528.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105528", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:41.758Z", + "dateUpdated": "2026-11-10T18:19:41.758Z" + }, + "containers": { + "cna": { + "title": "Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:41.758Z" + }, + "references": [ + { + "name": "Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105528" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105529.json b/data/2026/105xxx/CVE-2026-105529.json new file mode 100644 index 0000000000..20d5b8d0de --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105529.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105529", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:42.355Z", + "dateUpdated": "2026-11-10T18:19:42.355Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Windows Storage allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:42.355Z" + }, + "references": [ + { + "name": "Windows Storage Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105529" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105530.json b/data/2026/105xxx/CVE-2026-105530.json new file mode 100644 index 0000000000..8235c27d11 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105530.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105530", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:42.956Z", + "dateUpdated": "2026-11-10T18:19:42.956Z" + }, + "containers": { + "cna": { + "title": "Windows System Events Broker Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:42.956Z" + }, + "references": [ + { + "name": "Windows System Events Broker Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105530" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105531.json b/data/2026/105xxx/CVE-2026-105531.json new file mode 100644 index 0000000000..3522157bc1 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105531.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105531", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.437Z", + "datePublished": "2026-11-10T18:19:43.535Z", + "dateUpdated": "2026-11-10T18:19:43.535Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-73: External Control of File Name or Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-73" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:43.535Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105531" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105532.json b/data/2026/105xxx/CVE-2026-105532.json new file mode 100644 index 0000000000..c7ee2bd433 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105532.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105532", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.438Z", + "datePublished": "2026-11-10T18:19:44.045Z", + "dateUpdated": "2026-11-10T18:19:44.045Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:44.045Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105532" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105533.json b/data/2026/105xxx/CVE-2026-105533.json new file mode 100644 index 0000000000..5269aa6bb8 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105533.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105533", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.438Z", + "datePublished": "2026-11-10T18:19:44.530Z", + "dateUpdated": "2026-11-10T18:19:44.530Z" + }, + "containers": { + "cna": { + "title": "Windows COM Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:44.530Z" + }, + "references": [ + { + "name": "Windows COM Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105533" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105534.json b/data/2026/105xxx/CVE-2026-105534.json new file mode 100644 index 0000000000..a04f8b4adb --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105534.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105534", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.438Z", + "datePublished": "2026-11-10T18:18:59.680Z", + "dateUpdated": "2026-11-10T18:18:59.680Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Storage allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:59.680Z" + }, + "references": [ + { + "name": "Windows Storage Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105534" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105537.json b/data/2026/105xxx/CVE-2026-105537.json new file mode 100644 index 0000000000..45465c3160 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105537.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105537", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.438Z", + "datePublished": "2026-11-10T18:19:45.102Z", + "dateUpdated": "2026-11-10T18:19:45.102Z" + }, + "containers": { + "cna": { + "title": "Mailslot File System Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:45.102Z" + }, + "references": [ + { + "name": "Mailslot File System Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105537" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105540.json b/data/2026/105xxx/CVE-2026-105540.json new file mode 100644 index 0000000000..cfeb176375 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105540.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105540", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.438Z", + "datePublished": "2026-11-10T18:19:45.645Z", + "dateUpdated": "2026-11-10T18:19:45.645Z" + }, + "containers": { + "cna": { + "title": "Windows Error Reporting Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-669: Incorrect Resource Transfer Between Spheres", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-669" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:45.645Z" + }, + "references": [ + { + "name": "Windows Error Reporting Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105540" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105541.json b/data/2026/105xxx/CVE-2026-105541.json new file mode 100644 index 0000000000..12c588e2cf --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105541.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105541", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.438Z", + "datePublished": "2026-11-10T18:19:46.164Z", + "dateUpdated": "2026-11-10T18:19:46.164Z" + }, + "containers": { + "cna": { + "title": "Windows Audio Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of out-of-range pointer offset in Windows Audio Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-823: Use of Out-of-range Pointer Offset", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-823" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:46.164Z" + }, + "references": [ + { + "name": "Windows Audio Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105541" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105542.json b/data/2026/105xxx/CVE-2026-105542.json new file mode 100644 index 0000000000..5d437d0dba --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105542.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105542", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.438Z", + "datePublished": "2026-11-10T18:19:46.607Z", + "dateUpdated": "2026-11-10T18:19:46.607Z" + }, + "containers": { + "cna": { + "title": "Windows NTFS Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:46.607Z" + }, + "references": [ + { + "name": "Windows NTFS Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105542" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105543.json b/data/2026/105xxx/CVE-2026-105543.json new file mode 100644 index 0000000000..c10186b503 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105543.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105543", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T15:53:02.438Z", + "datePublished": "2026-11-10T18:19:47.116Z", + "dateUpdated": "2026-11-10T18:19:47.116Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:47.116Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105543" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105544.json b/data/2026/105xxx/CVE-2026-105544.json new file mode 100644 index 0000000000..0e5d474409 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105544.json @@ -0,0 +1,370 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105544", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.154Z", + "datePublished": "2026-11-10T18:15:12.518Z", + "dateUpdated": "2026-11-10T18:15:12.518Z" + }, + "containers": { + "cna": { + "title": ".NET Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.428" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.428" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.428" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.321" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.321" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.321" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.404" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.404" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.404" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.100" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.100" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.100" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.testplatform.cli:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.2.0", + "versionEndExcluding": "18.11.1" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Linux", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.404", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Mac OS", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.404", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.404", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.100", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.100", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.100", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Linux", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.428", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Mac OS", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.428", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.428", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Linux", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.321", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Mac OS", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.321", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.321", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2022 version 17.14", + "versions": [ + { + "version": "17.14.0", + "lessThan": "17.14.45", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.TestPlatform.CLI", + "versions": [ + { + "version": "17.2.0", + "lessThan": "18.11.1", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in .NET allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Elevation of Privilege", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:12.518Z" + }, + "references": [ + { + "name": ".NET Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105544" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105545.json b/data/2026/105xxx/CVE-2026-105545.json new file mode 100644 index 0000000000..97b333e8a9 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105545.json @@ -0,0 +1,540 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105545", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.154Z", + "datePublished": "2026-11-10T18:19:47.637Z", + "dateUpdated": "2026-11-10T18:19:47.637Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.\nA locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nThe security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:47.637Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105545" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105546.json b/data/2026/105xxx/CVE-2026-105546.json new file mode 100644 index 0000000000..dcb928269d --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105546.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105546", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.154Z", + "datePublished": "2026-11-10T18:19:48.144Z", + "dateUpdated": "2026-11-10T18:19:48.144Z" + }, + "containers": { + "cna": { + "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:48.144Z" + }, + "references": [ + { + "name": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105546" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105547.json b/data/2026/105xxx/CVE-2026-105547.json new file mode 100644 index 0000000000..fafe3ca2ee --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105547.json @@ -0,0 +1,392 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105547", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.154Z", + "datePublished": "2026-11-10T18:19:48.584Z", + "dateUpdated": "2026-11-10T18:19:48.584Z" + }, + "containers": { + "cna": { + "title": "Windows Setup and Deployment Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:48.584Z" + }, + "references": [ + { + "name": "Windows Setup and Deployment Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105547" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105549.json b/data/2026/105xxx/CVE-2026-105549.json new file mode 100644 index 0000000000..8255a9b866 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105549.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105549", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.155Z", + "datePublished": "2026-11-10T18:19:49.104Z", + "dateUpdated": "2026-11-10T18:19:49.104Z" + }, + "containers": { + "cna": { + "title": "Windows Smart Card Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:49.104Z" + }, + "references": [ + { + "name": "Windows Smart Card Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105549" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.3, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105551.json b/data/2026/105xxx/CVE-2026-105551.json new file mode 100644 index 0000000000..88db533d2c --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105551.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105551", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.155Z", + "datePublished": "2026-11-10T18:19:49.548Z", + "dateUpdated": "2026-11-10T18:19:49.548Z" + }, + "containers": { + "cna": { + "title": "Windows NetBIOS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows NetBIOS allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:49.548Z" + }, + "references": [ + { + "name": "Windows NetBIOS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105551" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105552.json b/data/2026/105xxx/CVE-2026-105552.json new file mode 100644 index 0000000000..a636815d84 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105552.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105552", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.155Z", + "datePublished": "2026-11-10T18:19:49.984Z", + "dateUpdated": "2026-11-10T18:19:49.984Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.\nTo exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.\nThe update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:49.984Z" + }, + "references": [ + { + "name": "Windows Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105552" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105553.json b/data/2026/105xxx/CVE-2026-105553.json new file mode 100644 index 0000000000..b4d46a8988 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105553.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105553", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.155Z", + "datePublished": "2026-11-10T18:19:50.586Z", + "dateUpdated": "2026-11-10T18:19:50.586Z" + }, + "containers": { + "cna": { + "title": "Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:50.586Z" + }, + "references": [ + { + "name": "Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105553" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105554.json b/data/2026/105xxx/CVE-2026-105554.json new file mode 100644 index 0000000000..5bd9293920 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105554.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105554", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.155Z", + "datePublished": "2026-11-10T18:19:00.258Z", + "dateUpdated": "2026-11-10T18:19:00.258Z" + }, + "containers": { + "cna": { + "title": "Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:00.258Z" + }, + "references": [ + { + "name": "Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105554" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105557.json b/data/2026/105xxx/CVE-2026-105557.json new file mode 100644 index 0000000000..9d250691ee --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105557.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105557", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.155Z", + "datePublished": "2026-11-10T18:19:51.165Z", + "dateUpdated": "2026-11-10T18:19:51.165Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:51.165Z" + }, + "references": [ + { + "name": "Windows DHCP Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105557" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105558.json b/data/2026/105xxx/CVE-2026-105558.json new file mode 100644 index 0000000000..aa9294e1aa --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105558.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105558", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.155Z", + "datePublished": "2026-11-10T18:19:51.742Z", + "dateUpdated": "2026-11-10T18:19:51.742Z" + }, + "containers": { + "cna": { + "title": "Windows Deployment Services Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:51.742Z" + }, + "references": [ + { + "name": "Windows Deployment Services Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105558" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105559.json b/data/2026/105xxx/CVE-2026-105559.json new file mode 100644 index 0000000000..e857101e17 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105559.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105559", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.155Z", + "datePublished": "2026-11-10T18:19:52.346Z", + "dateUpdated": "2026-11-10T18:19:52.346Z" + }, + "containers": { + "cna": { + "title": "Windows Active Directory Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:52.346Z" + }, + "references": [ + { + "name": "Windows Active Directory Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105559" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105560.json b/data/2026/105xxx/CVE-2026-105560.json new file mode 100644 index 0000000000..22a43d6a6a --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105560.json @@ -0,0 +1,236 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105560", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.156Z", + "datePublished": "2026-11-10T18:19:52.936Z", + "dateUpdated": "2026-11-10T18:19:52.936Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:52.936Z" + }, + "references": [ + { + "name": "Windows DHCP Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105560" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105561.json b/data/2026/105xxx/CVE-2026-105561.json new file mode 100644 index 0000000000..5943eca7f4 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105561.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105561", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.156Z", + "datePublished": "2026-11-10T18:19:01.597Z", + "dateUpdated": "2026-11-10T18:19:01.597Z" + }, + "containers": { + "cna": { + "title": "Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:01.597Z" + }, + "references": [ + { + "name": "Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105561" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105562.json b/data/2026/105xxx/CVE-2026-105562.json new file mode 100644 index 0000000000..7cd6d07c26 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105562.json @@ -0,0 +1,259 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105562", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.156Z", + "datePublished": "2026-11-10T18:19:02.359Z", + "dateUpdated": "2026-11-10T18:19:02.359Z" + }, + "containers": { + "cna": { + "title": "Windows Container Manager Service Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Container Manager Service allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:02.359Z" + }, + "references": [ + { + "name": "Windows Container Manager Service Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105562" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105565.json b/data/2026/105xxx/CVE-2026-105565.json new file mode 100644 index 0000000000..41c2178198 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105565.json @@ -0,0 +1,177 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105565", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.156Z", + "datePublished": "2026-11-10T18:19:53.390Z", + "dateUpdated": "2026-11-10T18:19:53.390Z" + }, + "containers": { + "cna": { + "title": "Windows MIDI Service Module Elevation of Privileges Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:53.390Z" + }, + "references": [ + { + "name": "Windows MIDI Service Module Elevation of Privileges Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105565" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105566.json b/data/2026/105xxx/CVE-2026-105566.json new file mode 100644 index 0000000000..984b35a623 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105566.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105566", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.156Z", + "datePublished": "2026-11-10T18:19:53.909Z", + "dateUpdated": "2026-11-10T18:19:53.909Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:53.909Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105566" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105567.json b/data/2026/105xxx/CVE-2026-105567.json new file mode 100644 index 0000000000..dfc2ee8949 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105567.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105567", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.156Z", + "datePublished": "2026-11-10T18:18:08.993Z", + "dateUpdated": "2026-11-10T18:18:08.993Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:08.993Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105567" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105568.json b/data/2026/105xxx/CVE-2026-105568.json new file mode 100644 index 0000000000..e61e3d7279 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105568.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105568", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.156Z", + "datePublished": "2026-11-10T18:19:03.080Z", + "dateUpdated": "2026-11-10T18:19:03.080Z" + }, + "containers": { + "cna": { + "title": "Windows Active Directory Domain Services Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:03.080Z" + }, + "references": [ + { + "name": "Windows Active Directory Domain Services Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105568" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105569.json b/data/2026/105xxx/CVE-2026-105569.json new file mode 100644 index 0000000000..d85918ba5c --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105569.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105569", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:02:13.156Z", + "datePublished": "2026-11-10T18:19:54.343Z", + "dateUpdated": "2026-11-10T18:19:54.343Z" + }, + "containers": { + "cna": { + "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:54.343Z" + }, + "references": [ + { + "name": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105569" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105574.json b/data/2026/105xxx/CVE-2026-105574.json new file mode 100644 index 0000000000..265ae84d5c --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105574.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105574", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.828Z", + "datePublished": "2026-11-10T18:19:54.858Z", + "dateUpdated": "2026-11-10T18:19:54.858Z" + }, + "containers": { + "cna": { + "title": "Windows MIDI Service Module Elevation of Privileges Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:54.858Z" + }, + "references": [ + { + "name": "Windows MIDI Service Module Elevation of Privileges Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105574" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105575.json b/data/2026/105xxx/CVE-2026-105575.json new file mode 100644 index 0000000000..9a2ad17b5f --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105575.json @@ -0,0 +1,364 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105575", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.828Z", + "datePublished": "2026-11-10T18:19:55.433Z", + "dateUpdated": "2026-11-10T18:19:55.433Z" + }, + "containers": { + "cna": { + "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:55.433Z" + }, + "references": [ + { + "name": "Windows DWM Core Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105575" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105578.json b/data/2026/105xxx/CVE-2026-105578.json new file mode 100644 index 0000000000..ec8932e1d6 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105578.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105578", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.829Z", + "datePublished": "2026-11-10T18:19:55.960Z", + "dateUpdated": "2026-11-10T18:19:55.960Z" + }, + "containers": { + "cna": { + "title": "Microsoft JScript Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:55.960Z" + }, + "references": [ + { + "name": "Microsoft JScript Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105578" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105579.json b/data/2026/105xxx/CVE-2026-105579.json new file mode 100644 index 0000000000..f2a97f901d --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105579.json @@ -0,0 +1,236 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105579", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.829Z", + "datePublished": "2026-11-10T18:19:56.422Z", + "dateUpdated": "2026-11-10T18:19:56.422Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:56.422Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105579" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105580.json b/data/2026/105xxx/CVE-2026-105580.json new file mode 100644 index 0000000000..fa4902ca77 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105580.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105580", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.829Z", + "datePublished": "2026-11-10T18:19:56.952Z", + "dateUpdated": "2026-11-10T18:19:56.952Z" + }, + "containers": { + "cna": { + "title": "Windows Management Instrumentation Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:56.952Z" + }, + "references": [ + { + "name": "Windows Management Instrumentation Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105580" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105581.json b/data/2026/105xxx/CVE-2026-105581.json new file mode 100644 index 0000000000..441bf0d351 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105581.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105581", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.829Z", + "datePublished": "2026-11-10T18:19:57.475Z", + "dateUpdated": "2026-11-10T18:19:57.475Z" + }, + "containers": { + "cna": { + "title": "Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:57.475Z" + }, + "references": [ + { + "name": "Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105581" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105582.json b/data/2026/105xxx/CVE-2026-105582.json new file mode 100644 index 0000000000..563ed0bee5 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105582.json @@ -0,0 +1,364 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105582", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.829Z", + "datePublished": "2026-11-10T18:15:00.565Z", + "dateUpdated": "2026-11-10T18:15:00.565Z" + }, + "containers": { + "cna": { + "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:00.565Z" + }, + "references": [ + { + "name": "Windows DWM Core Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105582" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105583.json b/data/2026/105xxx/CVE-2026-105583.json new file mode 100644 index 0000000000..276e9f2bea --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105583.json @@ -0,0 +1,364 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105583", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.829Z", + "datePublished": "2026-11-10T18:15:01.376Z", + "dateUpdated": "2026-11-10T18:15:01.376Z" + }, + "containers": { + "cna": { + "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:01.376Z" + }, + "references": [ + { + "name": "Windows DWM Core Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105583" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105584.json b/data/2026/105xxx/CVE-2026-105584.json new file mode 100644 index 0000000000..40aade1d1a --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105584.json @@ -0,0 +1,301 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105584", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.829Z", + "datePublished": "2026-11-10T18:15:02.235Z", + "dateUpdated": "2026-11-10T18:15:02.235Z" + }, + "containers": { + "cna": { + "title": "Windows Inventory Backup Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-134: Use of Externally-Controlled Format String", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-134" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:02.235Z" + }, + "references": [ + { + "name": "Windows Inventory Backup Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105584" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105586.json b/data/2026/105xxx/CVE-2026-105586.json new file mode 100644 index 0000000000..115f042c75 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105586.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105586", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.830Z", + "datePublished": "2026-11-10T18:15:02.770Z", + "dateUpdated": "2026-11-10T18:15:02.770Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:02.770Z" + }, + "references": [ + { + "name": "Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105586" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105587.json b/data/2026/105xxx/CVE-2026-105587.json new file mode 100644 index 0000000000..e580f00b38 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105587.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105587", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.830Z", + "datePublished": "2026-11-10T18:15:03.644Z", + "dateUpdated": "2026-11-10T18:15:03.644Z" + }, + "containers": { + "cna": { + "title": "Windows OLE DB Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:03.644Z" + }, + "references": [ + { + "name": "Windows OLE DB Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105587" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105588.json b/data/2026/105xxx/CVE-2026-105588.json new file mode 100644 index 0000000000..f764feb701 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105588.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105588", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.830Z", + "datePublished": "2026-11-10T18:15:04.377Z", + "dateUpdated": "2026-11-10T18:15:04.377Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:04.377Z" + }, + "references": [ + { + "name": "Windows DHCP Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105588" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105589.json b/data/2026/105xxx/CVE-2026-105589.json new file mode 100644 index 0000000000..acd2e0bfa9 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105589.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105589", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.830Z", + "datePublished": "2026-11-10T18:15:05.031Z", + "dateUpdated": "2026-11-10T18:15:05.031Z" + }, + "containers": { + "cna": { + "title": "Windows Wireless Networking Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:05.031Z" + }, + "references": [ + { + "name": "Windows Wireless Networking Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105589" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105590.json b/data/2026/105xxx/CVE-2026-105590.json new file mode 100644 index 0000000000..830c065285 --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105590.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105590", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T16:11:35.830Z", + "datePublished": "2026-11-10T18:15:05.595Z", + "dateUpdated": "2026-11-10T18:15:05.595Z" + }, + "containers": { + "cna": { + "title": "Windows Active Directory Certificate Services Security Feature Bypass", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-295: Improper Certificate Validation", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-295" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:05.595Z" + }, + "references": [ + { + "name": "Windows Active Directory Certificate Services Security Feature Bypass", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105590" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/105xxx/CVE-2026-105734.json b/data/2026/105xxx/CVE-2026-105734.json new file mode 100644 index 0000000000..2d6924a9af --- /dev/null +++ b/data/2026/105xxx/CVE-2026-105734.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-105734", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-05T19:03:23.342Z", + "datePublished": "2026-11-10T18:15:20.440Z", + "dateUpdated": "2026-11-10T18:15:20.440Z" + }, + "containers": { + "cna": { + "title": "Azure Local Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_local:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.2610.2.3134" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Local", + "platforms": [ + "Azure Linux 3.0" + ], + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.2610.2.3134", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-732: Incorrect Permission Assignment for Critical Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-732" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:20.440Z" + }, + "references": [ + { + "name": "Azure Local Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105734" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/107xxx/CVE-2026-107496.json b/data/2026/107xxx/CVE-2026-107496.json new file mode 100644 index 0000000000..d45528cac6 --- /dev/null +++ b/data/2026/107xxx/CVE-2026-107496.json @@ -0,0 +1,153 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-107496", + "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "state": "PUBLISHED", + "assignerShortName": "openssl", + "dateReserved": "2026-10-08T08:31:36.278Z", + "datePublished": "2026-11-10T18:14:18.207Z", + "dateUpdated": "2026-11-10T18:14:18.207Z" + }, + "containers": { + "cna": { + "affected": [ + { + "defaultStatus": "unaffected", + "product": "OpenSSL", + "vendor": "OpenSSL", + "versions": [ + { + "lessThan": "4.1.1", + "status": "affected", + "version": "4.1.0", + "versionType": "semver" + }, + { + "lessThan": "4.0.4", + "status": "affected", + "version": "4.0.0", + "versionType": "semver" + }, + { + "lessThan": "3.5.10", + "status": "affected", + "version": "3.5.0", + "versionType": "semver" + }, + { + "lessThan": "3.0.24", + "status": "affected", + "version": "3.0.0", + "versionType": "semver" + }, + { + "lessThan": "1.1.1zk", + "status": "affected", + "version": "1.1.1", + "versionType": "custom" + }, + { + "lessThan": "1.0.2zt", + "status": "affected", + "version": "1.0.2", + "versionType": "custom" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "type": "reporter", + "value": "Yinxi Liu" + }, + { + "lang": "en", + "type": "remediation developer", + "value": "Jakub Zelenka" + } + ], + "datePublic": "2026-11-10T11:00:00.000Z", + "descriptions": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "Issue summary: Encrypting a CMS message to an EC certificate whose group order
is 1 may cause CMS_encrypt() or CMS_encrypt_ex() to loop indefinitely.

Impact summary: An attacker able to supply the recipient certificate to an
application performing CMS encryption can cause that application to loop
indefinitely, consuming CPU and resulting in Denial of Service.

CWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

Description: CMS_encrypt() and CMS_encrypt_ex() encrypt a message to one or
more recipient certificates and, for an EC recipient, generate an ephemeral
key in the recipient's group. If the certificate declares a group order of 1,
random scalar generation can only produce zero. The key generation routine
then retries without limit while waiting for a nonzero private scalar, so the
call never returns.

The OpenSSL TLS and QUIC implementations do not use this path. An application
is exposed only if it calls CMS_encrypt() or CMS_encrypt_ex() with a recipient
certificate whose EC parameters are attacker-controlled. Certificates with
normal EC group orders do not trigger the loop.

OpenSSL 4.0 and later reject unknown explicit EC groups in default builds.
These versions are affected only when configured with the
enable-ec_explicit_curves option.

The result is a hang that consumes a CPU core until the process is
interrupted, a Denial of Service. The severity is Low because the attacker
must supply the recipient certificate and the application must choose to
encrypt to it; ordinary CMS encryption to trusted recipients is unaffected.

The fix makes EC key generation fail when the group has no valid nonzero
private scalar, instead of retrying indefinitely.

FIPS impact: no
The FIPS modules in 4.1, 4.0, 3.5 and 3.0 are not affected. The FIPS provider
does not support arbitrary explicit EC domain parameters, so an order-1 group
is rejected during key import before the vulnerable key generation path is
reached." + } + ], + "value": "Issue summary: Encrypting a CMS message to an EC certificate whose group order\nis 1 may cause CMS_encrypt() or CMS_encrypt_ex() to loop indefinitely.\n\nImpact summary: An attacker able to supply the recipient certificate to an\napplication performing CMS encryption can cause that application to loop\nindefinitely, consuming CPU and resulting in Denial of Service.\n\nCWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')\n\nDescription: CMS_encrypt() and CMS_encrypt_ex() encrypt a message to one or\nmore recipient certificates and, for an EC recipient, generate an ephemeral\nkey in the recipient's group. If the certificate declares a group order of 1,\nrandom scalar generation can only produce zero. The key generation routine\nthen retries without limit while waiting for a nonzero private scalar, so the\ncall never returns.\n\nThe OpenSSL TLS and QUIC implementations do not use this path. An application\nis exposed only if it calls CMS_encrypt() or CMS_encrypt_ex() with a recipient\ncertificate whose EC parameters are attacker-controlled. Certificates with\nnormal EC group orders do not trigger the loop.\n\nOpenSSL 4.0 and later reject unknown explicit EC groups in default builds.\nThese versions are affected only when configured with the\nenable-ec_explicit_curves option.\n\nThe result is a hang that consumes a CPU core until the process is\ninterrupted, a Denial of Service. The severity is Low because the attacker\nmust supply the recipient certificate and the application must choose to\nencrypt to it; ordinary CMS encryption to trusted recipients is unaffected.\n\nThe fix makes EC key generation fail when the group has no valid nonzero\nprivate scalar, instead of retrying indefinitely.\n\nFIPS impact: no\nThe FIPS modules in 4.1, 4.0, 3.5 and 3.0 are not affected. The FIPS provider\ndoes not support arbitrary explicit EC domain parameters, so an order-1 group\nis rejected during key import before the vulnerable key generation path is\nreached." + } + ], + "metrics": [ + { + "format": "other", + "other": { + "content": { + "text": "Low" + }, + "type": "https://openssl-library.org/policies/general/security-policy/" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-835", + "description": "CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "shortName": "openssl", + "dateUpdated": "2026-11-10T18:14:18.207Z" + }, + "references": [ + { + "name": "OpenSSL Advisory", + "tags": [ + "vendor-advisory" + ], + "url": "https://openssl-library.org/news/secadv/20261110.txt" + }, + { + "name": "4.1.1 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/36e15b618decdff1b116eead6747718e6e729ad2" + }, + { + "name": "4.0.4 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/a8531368ddb1f86d2a2782a8b693926bb67b59e7" + }, + { + "name": "3.5.10 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/a0051cfe699bf5a047bc1c4faef65f80f7987366" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "title": "Infinite Loop in CMS_encrypt() With an EC Group Order of 1", + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108401.json b/data/2026/108xxx/CVE-2026-108401.json new file mode 100644 index 0000000000..aeb3c91e32 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108401.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108401", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:19:03.622Z", + "dateUpdated": "2026-11-10T18:19:03.622Z" + }, + "containers": { + "cna": { + "title": "Remote Desktop Services Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:03.622Z" + }, + "references": [ + { + "name": "Remote Desktop Services Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108401" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108402.json b/data/2026/108xxx/CVE-2026-108402.json new file mode 100644 index 0000000000..ebfb600a75 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108402.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108402", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:15:20.959Z", + "dateUpdated": "2026-11-10T18:15:20.959Z" + }, + "containers": { + "cna": { + "title": "Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthorized attacker to deny service over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:20.959Z" + }, + "references": [ + { + "name": "Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108402" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108403.json b/data/2026/108xxx/CVE-2026-108403.json new file mode 100644 index 0000000000..33366f5175 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108403.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108403", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:15:08.748Z", + "dateUpdated": "2026-11-10T18:15:08.748Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:08.748Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108403" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108404.json b/data/2026/108xxx/CVE-2026-108404.json new file mode 100644 index 0000000000..ca57de5ecd --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108404.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108404", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:20:05.515Z", + "dateUpdated": "2026-11-10T18:20:05.515Z" + }, + "containers": { + "cna": { + "title": "Windows CD-ROM Driver Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:05.515Z" + }, + "references": [ + { + "name": "Windows CD-ROM Driver Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108404" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108405.json b/data/2026/108xxx/CVE-2026-108405.json new file mode 100644 index 0000000000..fc7cd40e00 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108405.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108405", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:20:01.730Z", + "dateUpdated": "2026-11-10T18:20:01.730Z" + }, + "containers": { + "cna": { + "title": "Windows CD-ROM Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:01.730Z" + }, + "references": [ + { + "name": "Windows CD-ROM Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108405" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108406.json b/data/2026/108xxx/CVE-2026-108406.json new file mode 100644 index 0000000000..44580fc177 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108406.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108406", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:19:19.653Z", + "dateUpdated": "2026-11-10T18:19:19.653Z" + }, + "containers": { + "cna": { + "title": "Windows Network Connection Broker Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:19.653Z" + }, + "references": [ + { + "name": "Windows Network Connection Broker Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108406" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108407.json b/data/2026/108xxx/CVE-2026-108407.json new file mode 100644 index 0000000000..6035c25cb4 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108407.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108407", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:20:02.175Z", + "dateUpdated": "2026-11-10T18:20:02.175Z" + }, + "containers": { + "cna": { + "title": "Windows GDI Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:02.175Z" + }, + "references": [ + { + "name": "Windows GDI Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108407" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108408.json b/data/2026/108xxx/CVE-2026-108408.json new file mode 100644 index 0000000000..c47d15bbde --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108408.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108408", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:19:20.112Z", + "dateUpdated": "2026-11-10T18:19:20.112Z" + }, + "containers": { + "cna": { + "title": "Windows Telephony Service Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:20.112Z" + }, + "references": [ + { + "name": "Windows Telephony Service Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108408" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108409.json b/data/2026/108xxx/CVE-2026-108409.json new file mode 100644 index 0000000000..eaf4105913 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108409.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108409", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:15:06.918Z", + "dateUpdated": "2026-11-10T18:15:06.918Z" + }, + "containers": { + "cna": { + "title": "Windows Overlay Filter Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:06.918Z" + }, + "references": [ + { + "name": "Windows Overlay Filter Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108409" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108410.json b/data/2026/108xxx/CVE-2026-108410.json new file mode 100644 index 0000000000..400b6772b4 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108410.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108410", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:19:20.660Z", + "dateUpdated": "2026-11-10T18:19:20.660Z" + }, + "containers": { + "cna": { + "title": "Windows Management Instrumentation Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:20.660Z" + }, + "references": [ + { + "name": "Windows Management Instrumentation Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108410" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108411.json b/data/2026/108xxx/CVE-2026-108411.json new file mode 100644 index 0000000000..53309b6693 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108411.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108411", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:15:09.383Z", + "dateUpdated": "2026-11-10T18:15:09.383Z" + }, + "containers": { + "cna": { + "title": "Microsoft ODBC Driver Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:09.383Z" + }, + "references": [ + { + "name": "Microsoft ODBC Driver Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108411" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108412.json b/data/2026/108xxx/CVE-2026-108412.json new file mode 100644 index 0000000000..4f13396b60 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108412.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108412", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.475Z", + "datePublished": "2026-11-10T18:19:58.064Z", + "dateUpdated": "2026-11-10T18:19:58.064Z" + }, + "containers": { + "cna": { + "title": "Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:58.064Z" + }, + "references": [ + { + "name": "Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108412" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108413.json b/data/2026/108xxx/CVE-2026-108413.json new file mode 100644 index 0000000000..3b4524ec3d --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108413.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108413", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:19:58.521Z", + "dateUpdated": "2026-11-10T18:19:58.521Z" + }, + "containers": { + "cna": { + "title": "Windows Telephony Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:58.521Z" + }, + "references": [ + { + "name": "Windows Telephony Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108413" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108414.json b/data/2026/108xxx/CVE-2026-108414.json new file mode 100644 index 0000000000..f9f96c68a8 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108414.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108414", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:15:29.113Z", + "dateUpdated": "2026-11-10T18:15:29.113Z" + }, + "containers": { + "cna": { + "title": "Windows Projected File System Filter Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:29.113Z" + }, + "references": [ + { + "name": "Windows Projected File System Filter Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108414" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108415.json b/data/2026/108xxx/CVE-2026-108415.json new file mode 100644 index 0000000000..9d1d5637a3 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108415.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108415", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:15:09.934Z", + "dateUpdated": "2026-11-10T18:15:09.934Z" + }, + "containers": { + "cna": { + "title": "Windows File Server Resource Management Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:09.934Z" + }, + "references": [ + { + "name": "Windows File Server Resource Management Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108415" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108416.json b/data/2026/108xxx/CVE-2026-108416.json new file mode 100644 index 0000000000..d929121d53 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108416.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108416", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:15:10.463Z", + "dateUpdated": "2026-11-10T18:15:10.463Z" + }, + "containers": { + "cna": { + "title": "Windows File Server Resource Management Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:10.463Z" + }, + "references": [ + { + "name": "Windows File Server Resource Management Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108416" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108417.json b/data/2026/108xxx/CVE-2026-108417.json new file mode 100644 index 0000000000..1f26e56aa7 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108417.json @@ -0,0 +1,468 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108417", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:15:07.610Z", + "dateUpdated": "2026-11-10T18:15:07.610Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_app_client_for_windows_desktop:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "1.00", + "versionEndExcluding": "2.0.1489.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows App Client for Windows Desktop", + "versions": [ + { + "version": "1.00", + "lessThan": "2.0.1489.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:07.610Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108417" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108418.json b/data/2026/108xxx/CVE-2026-108418.json new file mode 100644 index 0000000000..3079d0142b --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108418.json @@ -0,0 +1,468 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108418", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:15:21.579Z", + "dateUpdated": "2026-11-10T18:15:21.579Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_app_client_for_windows_desktop:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "1.00", + "versionEndExcluding": "2.0.1489.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows App Client for Windows Desktop", + "versions": [ + { + "version": "1.00", + "lessThan": "2.0.1489.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:21.579Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108418" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108419.json b/data/2026/108xxx/CVE-2026-108419.json new file mode 100644 index 0000000000..bac61741c6 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108419.json @@ -0,0 +1,468 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108419", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:15:22.023Z", + "dateUpdated": "2026-11-10T18:15:22.023Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_app_client_for_windows_desktop:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "1.00", + "versionEndExcluding": "2.0.1489.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows App Client for Windows Desktop", + "versions": [ + { + "version": "1.00", + "lessThan": "2.0.1489.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:22.023Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108419" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108421.json b/data/2026/108xxx/CVE-2026-108421.json new file mode 100644 index 0000000000..14acb953e0 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108421.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108421", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:19:21.248Z", + "dateUpdated": "2026-11-10T18:19:21.248Z" + }, + "containers": { + "cna": { + "title": "Windows File Server Resource Management Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:21.248Z" + }, + "references": [ + { + "name": "Windows File Server Resource Management Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108421" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108423.json b/data/2026/108xxx/CVE-2026-108423.json new file mode 100644 index 0000000000..016130af4b --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108423.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108423", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.476Z", + "datePublished": "2026-11-10T18:20:06.054Z", + "dateUpdated": "2026-11-10T18:20:06.054Z" + }, + "containers": { + "cna": { + "title": "Windows WinHTTP Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:06.054Z" + }, + "references": [ + { + "name": "Windows WinHTTP Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108423" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108424.json b/data/2026/108xxx/CVE-2026-108424.json new file mode 100644 index 0000000000..cebdbe0cb1 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108424.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108424", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.477Z", + "datePublished": "2026-11-10T18:15:08.145Z", + "dateUpdated": "2026-11-10T18:15:08.145Z" + }, + "containers": { + "cna": { + "title": "Windows GDI Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:08.145Z" + }, + "references": [ + { + "name": "Windows GDI Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108424" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108425.json b/data/2026/108xxx/CVE-2026-108425.json new file mode 100644 index 0000000000..06a35cb03a --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108425.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108425", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.477Z", + "datePublished": "2026-11-10T18:15:35.342Z", + "dateUpdated": "2026-11-10T18:15:35.342Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:35.342Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108425" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108469.json b/data/2026/108xxx/CVE-2026-108469.json new file mode 100644 index 0000000000..bc95c43463 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108469.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108469", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.480Z", + "datePublished": "2026-11-10T18:20:00.636Z", + "dateUpdated": "2026-11-10T18:20:00.636Z" + }, + "containers": { + "cna": { + "title": "Microsoft Authentication Library for JavaScript Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:authentication_library_for_javascript:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "5.21.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Authentication Library for JavaScript", + "versions": [ + { + "version": "1.0.0", + "lessThan": "5.21.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:00.636Z" + }, + "references": [ + { + "name": "Microsoft Authentication Library for JavaScript Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108469" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/108xxx/CVE-2026-108470.json b/data/2026/108xxx/CVE-2026-108470.json new file mode 100644 index 0000000000..cf7d06b091 --- /dev/null +++ b/data/2026/108xxx/CVE-2026-108470.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-108470", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-09T21:52:56.481Z", + "datePublished": "2026-11-10T18:20:01.190Z", + "dateUpdated": "2026-11-10T18:20:01.190Z" + }, + "containers": { + "cna": { + "title": "Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_msal-node:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "7.0.1" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "@azure/msal-node", + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "7.0.1", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-522: Insufficiently Protected Credentials", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-522" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:01.190Z" + }, + "references": [ + { + "name": "Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108470" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109454.json b/data/2026/109xxx/CVE-2026-109454.json new file mode 100644 index 0000000000..72fef09374 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109454.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109454", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.369Z", + "datePublished": "2026-11-10T18:15:29.705Z", + "dateUpdated": "2026-11-10T18:15:29.705Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:29.705Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109454" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109455.json b/data/2026/109xxx/CVE-2026-109455.json new file mode 100644 index 0000000000..a94d587056 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109455.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109455", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.369Z", + "datePublished": "2026-11-10T18:15:30.155Z", + "dateUpdated": "2026-11-10T18:15:30.155Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:30.155Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109455" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109456.json b/data/2026/109xxx/CVE-2026-109456.json new file mode 100644 index 0000000000..fc842e5b24 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109456.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109456", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.369Z", + "datePublished": "2026-11-10T18:15:30.738Z", + "dateUpdated": "2026-11-10T18:15:30.738Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:30.738Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109456" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.6, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109457.json b/data/2026/109xxx/CVE-2026-109457.json new file mode 100644 index 0000000000..2b1d513075 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109457.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109457", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.369Z", + "datePublished": "2026-11-10T18:15:31.256Z", + "dateUpdated": "2026-11-10T18:15:31.256Z" + }, + "containers": { + "cna": { + "title": "Azure CLI Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_machine_learning:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.0.0", + "versionEndExcluding": "2.45.1" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Machine Learning", + "versions": [ + { + "version": "3.0.0", + "lessThan": "2.45.1", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-78" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:31.256Z" + }, + "references": [ + { + "name": "Azure CLI Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109457" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109459.json b/data/2026/109xxx/CVE-2026-109459.json new file mode 100644 index 0000000000..4ab992ef49 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109459.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109459", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.370Z", + "datePublished": "2026-11-10T18:20:06.616Z", + "dateUpdated": "2026-11-10T18:20:06.616Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Queue Manager Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:06.616Z" + }, + "references": [ + { + "name": "Windows Message Queuing Queue Manager Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109459" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109460.json b/data/2026/109xxx/CVE-2026-109460.json new file mode 100644 index 0000000000..e1905287c5 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109460.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109460", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.370Z", + "datePublished": "2026-11-10T18:15:31.782Z", + "dateUpdated": "2026-11-10T18:15:31.782Z" + }, + "containers": { + "cna": { + "title": "Microsoft Entra Private Network Connector Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:entra_private_network_connector:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.5.4892.0", + "versionEndExcluding": "1.5.5130.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Entra Private Network Connector", + "versions": [ + { + "version": "1.5.4892.0", + "lessThan": "1.5.5130.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive information to an unauthorized actor in Microsoft Entra Private Network Connector allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-200" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:31.782Z" + }, + "references": [ + { + "name": "Microsoft Entra Private Network Connector Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109460" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109462.json b/data/2026/109xxx/CVE-2026-109462.json new file mode 100644 index 0000000000..861774a99a --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109462.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109462", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.370Z", + "datePublished": "2026-11-10T18:15:19.896Z", + "dateUpdated": "2026-11-10T18:15:19.896Z" + }, + "containers": { + "cna": { + "title": "Azure Firmware Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_virtual_machines:*:*:*:*:*:*:*:*", + "versionStartIncluding": "0", + "versionEndExcluding": "2610" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Virtual Machines", + "versions": [ + { + "version": "0", + "lessThan": "2610", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-299: Improper Check for Certificate Revocation", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-299" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:19.896Z" + }, + "references": [ + { + "name": "Azure Firmware Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109462" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.4, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109463.json b/data/2026/109xxx/CVE-2026-109463.json new file mode 100644 index 0000000000..8ee314edb9 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109463.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109463", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.370Z", + "datePublished": "2026-11-10T18:15:11.002Z", + "dateUpdated": "2026-11-10T18:15:11.002Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-502: Deserialization of Untrusted Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-502" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:11.002Z" + }, + "references": [ + { + "name": "Windows DNS Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109463" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109464.json b/data/2026/109xxx/CVE-2026-109464.json new file mode 100644 index 0000000000..c3c5a96fd3 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109464.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109464", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.370Z", + "datePublished": "2026-11-10T18:15:32.288Z", + "dateUpdated": "2026-11-10T18:15:32.288Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-502: Deserialization of Untrusted Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-502" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:32.288Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109464" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109466.json b/data/2026/109xxx/CVE-2026-109466.json new file mode 100644 index 0000000000..d201f691e1 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109466.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109466", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.370Z", + "datePublished": "2026-11-10T18:15:32.726Z", + "dateUpdated": "2026-11-10T18:15:32.726Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:32.726Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109466" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109467.json b/data/2026/109xxx/CVE-2026-109467.json new file mode 100644 index 0000000000..f0234707ea --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109467.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109467", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.370Z", + "datePublished": "2026-11-10T18:15:11.466Z", + "dateUpdated": "2026-11-10T18:15:11.466Z" + }, + "containers": { + "cna": { + "title": "Azure DevOps Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_devops:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "publication" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_devops_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "Patch 9" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure DevOps", + "versions": [ + { + "version": "1.0.0", + "lessThan": "publication", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Azure DevOps Server 2025", + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "Patch 9", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-287: Improper Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-287" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:11.466Z" + }, + "references": [ + { + "name": "Azure DevOps Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109467" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109472.json b/data/2026/109xxx/CVE-2026-109472.json new file mode 100644 index 0000000000..d15fb6926d --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109472.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109472", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.371Z", + "datePublished": "2026-11-10T18:15:33.235Z", + "dateUpdated": "2026-11-10T18:15:33.235Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-502: Deserialization of Untrusted Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-502" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:33.235Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109472" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109473.json b/data/2026/109xxx/CVE-2026-109473.json new file mode 100644 index 0000000000..87e3ea3008 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109473.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109473", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.371Z", + "datePublished": "2026-11-10T18:19:59.039Z", + "dateUpdated": "2026-11-10T18:19:59.039Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:59.039Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109473" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109475.json b/data/2026/109xxx/CVE-2026-109475.json new file mode 100644 index 0000000000..d2f595fb41 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109475.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109475", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.371Z", + "datePublished": "2026-11-10T18:15:22.540Z", + "dateUpdated": "2026-11-10T18:15:22.540Z" + }, + "containers": { + "cna": { + "title": ".NET Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Linux", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Linux", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Linux", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:22.540Z" + }, + "references": [ + { + "name": ".NET Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109475" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109476.json b/data/2026/109xxx/CVE-2026-109476.json new file mode 100644 index 0000000000..b86bc0ed9a --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109476.json @@ -0,0 +1,353 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109476", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.371Z", + "datePublished": "2026-11-10T18:15:23.121Z", + "dateUpdated": "2026-11-10T18:15:23.121Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Linux", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Mac OS", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Linux", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Mac OS", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Linux", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Mac OS", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2022 version 17.14", + "versions": [ + { + "version": "17.14.0", + "lessThan": "17.14.45", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-116: Improper Encoding or Escaping of Output", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-116" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:23.121Z" + }, + "references": [ + { + "name": "ASP.NET Core Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109476" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109478.json b/data/2026/109xxx/CVE-2026-109478.json new file mode 100644 index 0000000000..51c79ee45e --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109478.json @@ -0,0 +1,191 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109478", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:01:11.371Z", + "datePublished": "2026-11-10T18:15:23.710Z", + "dateUpdated": "2026-11-10T18:15:23.710Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Linux", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Mac OS", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2022 version 17.14", + "versions": [ + { + "version": "17.14.0", + "lessThan": "17.14.45", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-407: Inefficient Algorithmic Complexity", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-407" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:23.710Z" + }, + "references": [ + { + "name": "ASP.NET Core Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109478" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109481.json b/data/2026/109xxx/CVE-2026-109481.json new file mode 100644 index 0000000000..e284dac5cb --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109481.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109481", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.211Z", + "datePublished": "2026-11-10T18:15:33.744Z", + "dateUpdated": "2026-11-10T18:15:33.744Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-352: Cross-Site Request Forgery (CSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-352" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:33.744Z" + }, + "references": [ + { + "name": "ASP.NET Core Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109481" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109485.json b/data/2026/109xxx/CVE-2026-109485.json new file mode 100644 index 0000000000..63b72b918a --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109485.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109485", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.211Z", + "datePublished": "2026-11-10T18:15:35.800Z", + "dateUpdated": "2026-11-10T18:15:35.800Z" + }, + "containers": { + "cna": { + "title": "Microsoft 365 Agents SDK Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_agent_framework_sdk_for_dotnet:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.21.0", + "versionEndExcluding": "1.8.77" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Agent Framework SDK", + "versions": [ + { + "version": "1.21.0", + "lessThan": "1.8.77", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-918" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:35.800Z" + }, + "references": [ + { + "name": "Microsoft 365 Agents SDK Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109485" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109487.json b/data/2026/109xxx/CVE-2026-109487.json new file mode 100644 index 0000000000..0bc5fde6d5 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109487.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109487", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.211Z", + "datePublished": "2026-11-10T18:15:36.317Z", + "dateUpdated": "2026-11-10T18:15:36.317Z" + }, + "containers": { + "cna": { + "title": "Microsoft PowerPoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:36.317Z" + }, + "references": [ + { + "name": "Microsoft PowerPoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109487" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109491.json b/data/2026/109xxx/CVE-2026-109491.json new file mode 100644 index 0000000000..9e03641790 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109491.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109491", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.211Z", + "datePublished": "2026-11-10T18:15:34.290Z", + "dateUpdated": "2026-11-10T18:15:34.290Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:34.290Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109491" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109492.json b/data/2026/109xxx/CVE-2026-109492.json new file mode 100644 index 0000000000..28ba400b67 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109492.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109492", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.211Z", + "datePublished": "2026-11-10T18:15:34.812Z", + "dateUpdated": "2026-11-10T18:15:34.812Z" + }, + "containers": { + "cna": { + "title": "Microsoft MCP Gateway Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:mcp_gateway:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "1.0.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "mcp-gateway", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "1.0.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639: Authorization Bypass Through User-Controlled Key", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-639" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:34.812Z" + }, + "references": [ + { + "name": "Microsoft MCP Gateway Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109492" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109493.json b/data/2026/109xxx/CVE-2026-109493.json new file mode 100644 index 0000000000..84e691a850 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109493.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109493", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.211Z", + "datePublished": "2026-11-10T18:20:45.750Z", + "dateUpdated": "2026-11-10T18:20:45.750Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Access Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:45.750Z" + }, + "references": [ + { + "name": "Microsoft Office Access Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109493" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109494.json b/data/2026/109xxx/CVE-2026-109494.json new file mode 100644 index 0000000000..40c48c972d --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109494.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109494", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.211Z", + "datePublished": "2026-11-10T18:20:47.547Z", + "dateUpdated": "2026-11-10T18:20:47.547Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Visio Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:47.547Z" + }, + "references": [ + { + "name": "Microsoft Office Visio Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109494" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109495.json b/data/2026/109xxx/CVE-2026-109495.json new file mode 100644 index 0000000000..be682e1b8b --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109495.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109495", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.211Z", + "datePublished": "2026-11-10T18:20:48.178Z", + "dateUpdated": "2026-11-10T18:20:48.178Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:48.178Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109495" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109496.json b/data/2026/109xxx/CVE-2026-109496.json new file mode 100644 index 0000000000..ea6c3b97e5 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109496.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109496", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:48.734Z", + "dateUpdated": "2026-11-10T18:20:48.734Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Visio Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:48.734Z" + }, + "references": [ + { + "name": "Microsoft Office Visio Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109496" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109497.json b/data/2026/109xxx/CVE-2026-109497.json new file mode 100644 index 0000000000..d80498918d --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109497.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109497", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:49.258Z", + "dateUpdated": "2026-11-10T18:20:49.258Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:49.258Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109497" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109498.json b/data/2026/109xxx/CVE-2026-109498.json new file mode 100644 index 0000000000..e4958f8d72 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109498.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109498", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:49.842Z", + "dateUpdated": "2026-11-10T18:20:49.842Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Access Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:49.842Z" + }, + "references": [ + { + "name": "Microsoft Office Access Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109498" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109499.json b/data/2026/109xxx/CVE-2026-109499.json new file mode 100644 index 0000000000..a1c3c2a501 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109499.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109499", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:50.290Z", + "dateUpdated": "2026-11-10T18:20:50.290Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Access of resource using incompatible type ('type confusion') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:50.290Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109499" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109500.json b/data/2026/109xxx/CVE-2026-109500.json new file mode 100644 index 0000000000..68e7a3d917 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109500.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109500", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:50.806Z", + "dateUpdated": "2026-11-10T18:20:50.806Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:50.806Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109500" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109501.json b/data/2026/109xxx/CVE-2026-109501.json new file mode 100644 index 0000000000..962fe4f515 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109501.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109501", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:51.318Z", + "dateUpdated": "2026-11-10T18:20:51.318Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:51.318Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109501" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109502.json b/data/2026/109xxx/CVE-2026-109502.json new file mode 100644 index 0000000000..a97bd4a783 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109502.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109502", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:51.828Z", + "dateUpdated": "2026-11-10T18:20:51.828Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-918" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:51.828Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109502" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109503.json b/data/2026/109xxx/CVE-2026-109503.json new file mode 100644 index 0000000000..108f4e801a --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109503.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109503", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:52.265Z", + "dateUpdated": "2026-11-10T18:20:52.265Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:52.265Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109503" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109504.json b/data/2026/109xxx/CVE-2026-109504.json new file mode 100644 index 0000000000..a45e5c0ab3 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109504.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109504", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:52.773Z", + "dateUpdated": "2026-11-10T18:20:52.773Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:52.773Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109504" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/109xxx/CVE-2026-109505.json b/data/2026/109xxx/CVE-2026-109505.json new file mode 100644 index 0000000000..34a8bdf3c2 --- /dev/null +++ b/data/2026/109xxx/CVE-2026-109505.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-109505", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-12T17:12:29.212Z", + "datePublished": "2026-11-10T18:20:53.357Z", + "dateUpdated": "2026-11-10T18:20:53.357Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:53.357Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109505" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110043.json b/data/2026/110xxx/CVE-2026-110043.json new file mode 100644 index 0000000000..52c23472eb --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110043.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110043", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.897Z", + "datePublished": "2026-11-10T18:20:53.886Z", + "dateUpdated": "2026-11-10T18:20:53.886Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:53.886Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110043" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110044.json b/data/2026/110xxx/CVE-2026-110044.json new file mode 100644 index 0000000000..88a5d34738 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110044.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110044", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:54.336Z", + "dateUpdated": "2026-11-10T18:20:54.336Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-502: Deserialization of Untrusted Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-502" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:54.336Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110044" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110045.json b/data/2026/110xxx/CVE-2026-110045.json new file mode 100644 index 0000000000..05148c8b26 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110045.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110045", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:54.849Z", + "dateUpdated": "2026-11-10T18:20:54.849Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:54.849Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110045" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110046.json b/data/2026/110xxx/CVE-2026-110046.json new file mode 100644 index 0000000000..07ebd2652b --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110046.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110046", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:55.447Z", + "dateUpdated": "2026-11-10T18:20:55.447Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-193: Off-by-one Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-193" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:55.447Z" + }, + "references": [ + { + "name": "Microsoft Office Word Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110046" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110047.json b/data/2026/110xxx/CVE-2026-110047.json new file mode 100644 index 0000000000..9b851789c4 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110047.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110047", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:55.977Z", + "dateUpdated": "2026-11-10T18:20:55.977Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:55.977Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110047" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110048.json b/data/2026/110xxx/CVE-2026-110048.json new file mode 100644 index 0000000000..e372d525e3 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110048.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110048", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:56.428Z", + "dateUpdated": "2026-11-10T18:20:56.428Z" + }, + "containers": { + "cna": { + "title": "Microsoft Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:56.428Z" + }, + "references": [ + { + "name": "Microsoft Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110048" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110049.json b/data/2026/110xxx/CVE-2026-110049.json new file mode 100644 index 0000000000..561ff98278 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110049.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110049", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:56.954Z", + "dateUpdated": "2026-11-10T18:20:56.954Z" + }, + "containers": { + "cna": { + "title": "Microsoft Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:56.954Z" + }, + "references": [ + { + "name": "Microsoft Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110049" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110050.json b/data/2026/110xxx/CVE-2026-110050.json new file mode 100644 index 0000000000..bbd1948070 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110050.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110050", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:57.561Z", + "dateUpdated": "2026-11-10T18:20:57.561Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:57.561Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110050" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110051.json b/data/2026/110xxx/CVE-2026-110051.json new file mode 100644 index 0000000000..5e590bff14 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110051.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110051", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:58.084Z", + "dateUpdated": "2026-11-10T18:20:58.084Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-681: Incorrect Conversion between Numeric Types", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-681" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:58.084Z" + }, + "references": [ + { + "name": "Microsoft Office Word Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110051" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110052.json b/data/2026/110xxx/CVE-2026-110052.json new file mode 100644 index 0000000000..38d73d183f --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110052.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110052", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.898Z", + "datePublished": "2026-11-10T18:20:58.587Z", + "dateUpdated": "2026-11-10T18:20:58.587Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:58.587Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110052" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110053.json b/data/2026/110xxx/CVE-2026-110053.json new file mode 100644 index 0000000000..470149b0f7 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110053.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110053", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:20:59.049Z", + "dateUpdated": "2026-11-10T18:20:59.049Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:59.049Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110053" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110054.json b/data/2026/110xxx/CVE-2026-110054.json new file mode 100644 index 0000000000..67c3ff2e46 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110054.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110054", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:20:59.563Z", + "dateUpdated": "2026-11-10T18:20:59.563Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:59.563Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110054" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110055.json b/data/2026/110xxx/CVE-2026-110055.json new file mode 100644 index 0000000000..72132db9a5 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110055.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110055", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:21:00.091Z", + "dateUpdated": "2026-11-10T18:21:00.091Z" + }, + "containers": { + "cna": { + "title": "Microsoft Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:00.091Z" + }, + "references": [ + { + "name": "Microsoft Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110055" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110056.json b/data/2026/110xxx/CVE-2026-110056.json new file mode 100644 index 0000000000..e3f80bfd46 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110056.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110056", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:21:00.664Z", + "dateUpdated": "2026-11-10T18:21:00.664Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:00.664Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110056" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110057.json b/data/2026/110xxx/CVE-2026-110057.json new file mode 100644 index 0000000000..8633751e1c --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110057.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110057", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:21:01.260Z", + "dateUpdated": "2026-11-10T18:21:01.260Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Authorization bypass through user-controlled key in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639: Authorization Bypass Through User-Controlled Key", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-639" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:01.260Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110057" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110058.json b/data/2026/110xxx/CVE-2026-110058.json new file mode 100644 index 0000000000..cb43e460f7 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110058.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110058", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:21:01.770Z", + "dateUpdated": "2026-11-10T18:21:01.770Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Access Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:01.770Z" + }, + "references": [ + { + "name": "Microsoft Office Access Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110058" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110059.json b/data/2026/110xxx/CVE-2026-110059.json new file mode 100644 index 0000000000..a820715531 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110059.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110059", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:21:02.205Z", + "dateUpdated": "2026-11-10T18:21:02.205Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Access Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:02.205Z" + }, + "references": [ + { + "name": "Microsoft Office Access Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110059" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110060.json b/data/2026/110xxx/CVE-2026-110060.json new file mode 100644 index 0000000000..5518bced2a --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110060.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110060", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:21:02.755Z", + "dateUpdated": "2026-11-10T18:21:02.755Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Access Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:02.755Z" + }, + "references": [ + { + "name": "Microsoft Office Access Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110060" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110061.json b/data/2026/110xxx/CVE-2026-110061.json new file mode 100644 index 0000000000..b741038f99 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110061.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110061", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:21:03.338Z", + "dateUpdated": "2026-11-10T18:21:03.338Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:03.338Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110061" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110062.json b/data/2026/110xxx/CVE-2026-110062.json new file mode 100644 index 0000000000..a14a75b958 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110062.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110062", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.899Z", + "datePublished": "2026-11-10T18:21:03.880Z", + "dateUpdated": "2026-11-10T18:21:03.880Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:03.880Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110062" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110064.json b/data/2026/110xxx/CVE-2026-110064.json new file mode 100644 index 0000000000..796efdc04d --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110064.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110064", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.900Z", + "datePublished": "2026-11-10T18:21:04.466Z", + "dateUpdated": "2026-11-10T18:21:04.466Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:04.466Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110064" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110065.json b/data/2026/110xxx/CVE-2026-110065.json new file mode 100644 index 0000000000..4a2af12ff3 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110065.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110065", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.900Z", + "datePublished": "2026-11-10T18:21:04.971Z", + "dateUpdated": "2026-11-10T18:21:04.971Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:04.971Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110065" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110066.json b/data/2026/110xxx/CVE-2026-110066.json new file mode 100644 index 0000000000..2e3c5a382c --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110066.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110066", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.900Z", + "datePublished": "2026-11-10T18:21:05.567Z", + "dateUpdated": "2026-11-10T18:21:05.567Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:05.567Z" + }, + "references": [ + { + "name": "Microsoft Office Word Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110066" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110067.json b/data/2026/110xxx/CVE-2026-110067.json new file mode 100644 index 0000000000..580a8bcedd --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110067.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110067", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.900Z", + "datePublished": "2026-11-10T18:21:06.103Z", + "dateUpdated": "2026-11-10T18:21:06.103Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:06.103Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110067" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/110xxx/CVE-2026-110068.json b/data/2026/110xxx/CVE-2026-110068.json new file mode 100644 index 0000000000..97abfe4422 --- /dev/null +++ b/data/2026/110xxx/CVE-2026-110068.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-110068", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-13T15:44:30.900Z", + "datePublished": "2026-11-10T18:21:06.720Z", + "dateUpdated": "2026-11-10T18:21:06.720Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:06.720Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110068" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111285.json b/data/2026/111xxx/CVE-2026-111285.json new file mode 100644 index 0000000000..9e39b73a68 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111285.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111285", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.142Z", + "datePublished": "2026-11-10T18:21:07.281Z", + "dateUpdated": "2026-11-10T18:21:07.281Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:07.281Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111285" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111286.json b/data/2026/111xxx/CVE-2026-111286.json new file mode 100644 index 0000000000..d936f514dc --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111286.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111286", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.142Z", + "datePublished": "2026-11-10T18:21:07.894Z", + "dateUpdated": "2026-11-10T18:21:07.894Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:07.894Z" + }, + "references": [ + { + "name": "Microsoft Office Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111286" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111287.json b/data/2026/111xxx/CVE-2026-111287.json new file mode 100644 index 0000000000..4db56e869b --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111287.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111287", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.142Z", + "datePublished": "2026-11-10T18:21:08.567Z", + "dateUpdated": "2026-11-10T18:21:08.567Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:08.567Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111287" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111288.json b/data/2026/111xxx/CVE-2026-111288.json new file mode 100644 index 0000000000..5b0efee3d1 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111288.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111288", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.142Z", + "datePublished": "2026-11-10T18:21:09.203Z", + "dateUpdated": "2026-11-10T18:21:09.203Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:09.203Z" + }, + "references": [ + { + "name": "Microsoft Office Word Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111288" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111289.json b/data/2026/111xxx/CVE-2026-111289.json new file mode 100644 index 0000000000..3cbe587bf9 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111289.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111289", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.142Z", + "datePublished": "2026-11-10T18:21:09.778Z", + "dateUpdated": "2026-11-10T18:21:09.778Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:09.778Z" + }, + "references": [ + { + "name": "Microsoft Office Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111289" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111290.json b/data/2026/111xxx/CVE-2026-111290.json new file mode 100644 index 0000000000..a48f8f57d9 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111290.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111290", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.142Z", + "datePublished": "2026-11-10T18:21:10.299Z", + "dateUpdated": "2026-11-10T18:21:10.299Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:10.299Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111290" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111291.json b/data/2026/111xxx/CVE-2026-111291.json new file mode 100644 index 0000000000..ee9a0da33b --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111291.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111291", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:10.815Z", + "dateUpdated": "2026-11-10T18:21:10.815Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:10.815Z" + }, + "references": [ + { + "name": "Microsoft Office Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111291" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111292.json b/data/2026/111xxx/CVE-2026-111292.json new file mode 100644 index 0000000000..514f8fd2b4 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111292.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111292", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:11.332Z", + "dateUpdated": "2026-11-10T18:21:11.332Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:11.332Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111292" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111293.json b/data/2026/111xxx/CVE-2026-111293.json new file mode 100644 index 0000000000..2278f08c73 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111293.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111293", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:11.991Z", + "dateUpdated": "2026-11-10T18:21:11.991Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + }, + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:11.991Z" + }, + "references": [ + { + "name": "Microsoft Office Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111293" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111294.json b/data/2026/111xxx/CVE-2026-111294.json new file mode 100644 index 0000000000..b06f851241 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111294.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111294", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:12.439Z", + "dateUpdated": "2026-11-10T18:21:12.439Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:12.439Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111294" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111295.json b/data/2026/111xxx/CVE-2026-111295.json new file mode 100644 index 0000000000..42676e1cc7 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111295.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111295", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:13.055Z", + "dateUpdated": "2026-11-10T18:21:13.055Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:13.055Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111295" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111296.json b/data/2026/111xxx/CVE-2026-111296.json new file mode 100644 index 0000000000..918046a215 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111296.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111296", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:13.637Z", + "dateUpdated": "2026-11-10T18:21:13.637Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-918" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:13.637Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111296" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111297.json b/data/2026/111xxx/CVE-2026-111297.json new file mode 100644 index 0000000000..31fa13204a --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111297.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111297", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:14.183Z", + "dateUpdated": "2026-11-10T18:21:14.183Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:14.183Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111297" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111298.json b/data/2026/111xxx/CVE-2026-111298.json new file mode 100644 index 0000000000..c2bd53dd01 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111298.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111298", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:16.893Z", + "dateUpdated": "2026-11-10T18:21:16.893Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:16.893Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111298" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111299.json b/data/2026/111xxx/CVE-2026-111299.json new file mode 100644 index 0000000000..9e78e9755f --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111299.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111299", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:17.486Z", + "dateUpdated": "2026-11-10T18:21:17.486Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:17.486Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111299" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111300.json b/data/2026/111xxx/CVE-2026-111300.json new file mode 100644 index 0000000000..4b75fd5a8c --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111300.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111300", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:18.094Z", + "dateUpdated": "2026-11-10T18:21:18.094Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:18.094Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111300" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111301.json b/data/2026/111xxx/CVE-2026-111301.json new file mode 100644 index 0000000000..bf2b117d44 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111301.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111301", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:18.721Z", + "dateUpdated": "2026-11-10T18:21:18.721Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Access Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:18.721Z" + }, + "references": [ + { + "name": "Microsoft Office Access Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111301" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111302.json b/data/2026/111xxx/CVE-2026-111302.json new file mode 100644 index 0000000000..e89b5db297 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111302.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111302", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.143Z", + "datePublished": "2026-11-10T18:21:19.325Z", + "dateUpdated": "2026-11-10T18:21:19.325Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:19.325Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111302" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111303.json b/data/2026/111xxx/CVE-2026-111303.json new file mode 100644 index 0000000000..298c92e303 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111303.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111303", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.144Z", + "datePublished": "2026-11-10T18:21:19.793Z", + "dateUpdated": "2026-11-10T18:21:19.793Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:19.793Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111303" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111304.json b/data/2026/111xxx/CVE-2026-111304.json new file mode 100644 index 0000000000..c79c08a9fa --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111304.json @@ -0,0 +1,159 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111304", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.144Z", + "datePublished": "2026-11-10T18:21:20.308Z", + "dateUpdated": "2026-11-10T18:21:20.308Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:20.308Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111304" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111305.json b/data/2026/111xxx/CVE-2026-111305.json new file mode 100644 index 0000000000..61910f2cda --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111305.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111305", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.144Z", + "datePublished": "2026-11-10T18:21:20.878Z", + "dateUpdated": "2026-11-10T18:21:20.878Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Access Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:20.878Z" + }, + "references": [ + { + "name": "Microsoft Office Access Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111305" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111306.json b/data/2026/111xxx/CVE-2026-111306.json new file mode 100644 index 0000000000..3552c3ca93 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111306.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111306", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.144Z", + "datePublished": "2026-11-10T18:21:21.391Z", + "dateUpdated": "2026-11-10T18:21:21.391Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:21.391Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111306" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111307.json b/data/2026/111xxx/CVE-2026-111307.json new file mode 100644 index 0000000000..9d0c7b82c5 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111307.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111307", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.144Z", + "datePublished": "2026-11-10T18:21:21.929Z", + "dateUpdated": "2026-11-10T18:21:21.929Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:21.929Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111307" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111308.json b/data/2026/111xxx/CVE-2026-111308.json new file mode 100644 index 0000000000..00ae9a4595 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111308.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111308", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.144Z", + "datePublished": "2026-11-10T18:21:22.564Z", + "dateUpdated": "2026-11-10T18:21:22.564Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:22.564Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111308" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111309.json b/data/2026/111xxx/CVE-2026-111309.json new file mode 100644 index 0000000000..a596adbce3 --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111309.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111309", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.144Z", + "datePublished": "2026-11-10T18:21:23.136Z", + "dateUpdated": "2026-11-10T18:21:23.136Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:23.136Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111309" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/111xxx/CVE-2026-111310.json b/data/2026/111xxx/CVE-2026-111310.json new file mode 100644 index 0000000000..9b016c633d --- /dev/null +++ b/data/2026/111xxx/CVE-2026-111310.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-111310", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-15T20:05:00.144Z", + "datePublished": "2026-11-10T18:21:23.738Z", + "dateUpdated": "2026-11-10T18:21:23.738Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:23.738Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111310" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112714.json b/data/2026/112xxx/CVE-2026-112714.json new file mode 100644 index 0000000000..325052187e --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112714.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112714", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.069Z", + "datePublished": "2026-11-10T18:21:24.359Z", + "dateUpdated": "2026-11-10T18:21:24.359Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:24.359Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112714" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112715.json b/data/2026/112xxx/CVE-2026-112715.json new file mode 100644 index 0000000000..aee62078e9 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112715.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112715", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.069Z", + "datePublished": "2026-11-10T18:21:24.953Z", + "dateUpdated": "2026-11-10T18:21:24.953Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:24.953Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112715" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112716.json b/data/2026/112xxx/CVE-2026-112716.json new file mode 100644 index 0000000000..7c8405ffd6 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112716.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112716", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.069Z", + "datePublished": "2026-11-10T18:21:25.543Z", + "dateUpdated": "2026-11-10T18:21:25.543Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:25.543Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112716" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112717.json b/data/2026/112xxx/CVE-2026-112717.json new file mode 100644 index 0000000000..badc3d0279 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112717.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112717", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.069Z", + "datePublished": "2026-11-10T18:21:26.119Z", + "dateUpdated": "2026-11-10T18:21:26.119Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:26.119Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112717" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112718.json b/data/2026/112xxx/CVE-2026-112718.json new file mode 100644 index 0000000000..587121aa6a --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112718.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112718", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.069Z", + "datePublished": "2026-11-10T18:21:26.644Z", + "dateUpdated": "2026-11-10T18:21:26.644Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:26.644Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112718" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112719.json b/data/2026/112xxx/CVE-2026-112719.json new file mode 100644 index 0000000000..207a3a33ab --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112719.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112719", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.069Z", + "datePublished": "2026-11-10T18:21:27.183Z", + "dateUpdated": "2026-11-10T18:21:27.183Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:27.183Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112719" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112720.json b/data/2026/112xxx/CVE-2026-112720.json new file mode 100644 index 0000000000..fe68eee6e4 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112720.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112720", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:27.704Z", + "dateUpdated": "2026-11-10T18:21:27.704Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:27.704Z" + }, + "references": [ + { + "name": "Microsoft Office Word Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112720" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112721.json b/data/2026/112xxx/CVE-2026-112721.json new file mode 100644 index 0000000000..7e17b598f7 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112721.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112721", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:28.287Z", + "dateUpdated": "2026-11-10T18:21:28.287Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:28.287Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112721" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112722.json b/data/2026/112xxx/CVE-2026-112722.json new file mode 100644 index 0000000000..618157cea3 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112722.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112722", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:28.767Z", + "dateUpdated": "2026-11-10T18:21:28.767Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:28.767Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112722" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112723.json b/data/2026/112xxx/CVE-2026-112723.json new file mode 100644 index 0000000000..695dd4420c --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112723.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112723", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:29.350Z", + "dateUpdated": "2026-11-10T18:21:29.350Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:29.350Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112723" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112724.json b/data/2026/112xxx/CVE-2026-112724.json new file mode 100644 index 0000000000..748e866b4e --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112724.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112724", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:29.786Z", + "dateUpdated": "2026-11-10T18:21:29.786Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:29.786Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112724" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112726.json b/data/2026/112xxx/CVE-2026-112726.json new file mode 100644 index 0000000000..b8ba07f586 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112726.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112726", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:30.417Z", + "dateUpdated": "2026-11-10T18:21:30.417Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:30.417Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112726" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112727.json b/data/2026/112xxx/CVE-2026-112727.json new file mode 100644 index 0000000000..5a74880287 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112727.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112727", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:20:44.774Z", + "dateUpdated": "2026-11-10T18:20:44.774Z" + }, + "containers": { + "cna": { + "title": "Windows Domain Name Service Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:44.774Z" + }, + "references": [ + { + "name": "Windows Domain Name Service Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112727" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112728.json b/data/2026/112xxx/CVE-2026-112728.json new file mode 100644 index 0000000000..b3edaf5813 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112728.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112728", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:31.019Z", + "dateUpdated": "2026-11-10T18:21:31.019Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:31.019Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112728" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112729.json b/data/2026/112xxx/CVE-2026-112729.json new file mode 100644 index 0000000000..2247c7137b --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112729.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112729", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:31.561Z", + "dateUpdated": "2026-11-10T18:21:31.561Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:31.561Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112729" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112730.json b/data/2026/112xxx/CVE-2026-112730.json new file mode 100644 index 0000000000..535de4d2e7 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112730.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112730", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:32.158Z", + "dateUpdated": "2026-11-10T18:21:32.158Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:32.158Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112730" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112731.json b/data/2026/112xxx/CVE-2026-112731.json new file mode 100644 index 0000000000..3dedfc7566 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112731.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112731", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:32.736Z", + "dateUpdated": "2026-11-10T18:21:32.736Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:32.736Z" + }, + "references": [ + { + "name": "Microsoft Office Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112731" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112733.json b/data/2026/112xxx/CVE-2026-112733.json new file mode 100644 index 0000000000..283acf3f68 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112733.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112733", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.070Z", + "datePublished": "2026-11-10T18:21:33.313Z", + "dateUpdated": "2026-11-10T18:21:33.313Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:33.313Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112733" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112734.json b/data/2026/112xxx/CVE-2026-112734.json new file mode 100644 index 0000000000..8ed5e4043f --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112734.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112734", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.071Z", + "datePublished": "2026-11-10T18:21:33.821Z", + "dateUpdated": "2026-11-10T18:21:33.821Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:33.821Z" + }, + "references": [ + { + "name": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112734" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112735.json b/data/2026/112xxx/CVE-2026-112735.json new file mode 100644 index 0000000000..3dd081c120 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112735.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112735", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.071Z", + "datePublished": "2026-11-10T18:21:34.267Z", + "dateUpdated": "2026-11-10T18:21:34.267Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:34.267Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112735" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112736.json b/data/2026/112xxx/CVE-2026-112736.json new file mode 100644 index 0000000000..79d83c5bf8 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112736.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112736", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.071Z", + "datePublished": "2026-11-10T18:21:34.781Z", + "dateUpdated": "2026-11-10T18:21:34.781Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-918" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:34.781Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112736" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112737.json b/data/2026/112xxx/CVE-2026-112737.json new file mode 100644 index 0000000000..098e8a4334 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112737.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112737", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.071Z", + "datePublished": "2026-11-10T18:21:35.293Z", + "dateUpdated": "2026-11-10T18:21:35.293Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:35.293Z" + }, + "references": [ + { + "name": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112737" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112738.json b/data/2026/112xxx/CVE-2026-112738.json new file mode 100644 index 0000000000..ddf1282631 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112738.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112738", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.071Z", + "datePublished": "2026-11-10T18:21:35.798Z", + "dateUpdated": "2026-11-10T18:21:35.798Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:35.798Z" + }, + "references": [ + { + "name": "Microsoft Office PowerPoint Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112738" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112739.json b/data/2026/112xxx/CVE-2026-112739.json new file mode 100644 index 0000000000..40ab99bb92 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112739.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112739", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T17:50:07.071Z", + "datePublished": "2026-11-10T18:21:36.323Z", + "dateUpdated": "2026-11-10T18:21:36.323Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:36.323Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112739" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112741.json b/data/2026/112xxx/CVE-2026-112741.json new file mode 100644 index 0000000000..87d32083e8 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112741.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112741", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.628Z", + "datePublished": "2026-11-10T18:21:36.911Z", + "dateUpdated": "2026-11-10T18:21:36.911Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:36.911Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112741" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112743.json b/data/2026/112xxx/CVE-2026-112743.json new file mode 100644 index 0000000000..9e43549b36 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112743.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112743", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.628Z", + "datePublished": "2026-11-10T18:18:00.856Z", + "dateUpdated": "2026-11-10T18:18:00.856Z" + }, + "containers": { + "cna": { + "title": "Windows Device Association Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:00.856Z" + }, + "references": [ + { + "name": "Windows Device Association Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112743" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112745.json b/data/2026/112xxx/CVE-2026-112745.json new file mode 100644 index 0000000000..62bd499d24 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112745.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112745", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.628Z", + "datePublished": "2026-11-10T18:21:37.448Z", + "dateUpdated": "2026-11-10T18:21:37.448Z" + }, + "containers": { + "cna": { + "title": "Azure DevOps Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_devops_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "Patch 8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_devops:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "Sprint 278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure DevOps", + "versions": [ + { + "version": "1.0.0", + "lessThan": "Sprint 278", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Azure DevOps Server", + "versions": [ + { + "version": "1.0.0", + "lessThan": "Patch 8", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-918" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:37.448Z" + }, + "references": [ + { + "name": "Azure DevOps Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112745" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112750.json b/data/2026/112xxx/CVE-2026-112750.json new file mode 100644 index 0000000000..dd757c3252 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112750.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112750", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.628Z", + "datePublished": "2026-11-10T18:18:01.308Z", + "dateUpdated": "2026-11-10T18:18:01.308Z" + }, + "containers": { + "cna": { + "title": "Windows Overlay Filter Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Numeric truncation error in Windows Overlay Filter allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:01.308Z" + }, + "references": [ + { + "name": "Windows Overlay Filter Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112750" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112751.json b/data/2026/112xxx/CVE-2026-112751.json new file mode 100644 index 0000000000..2188048c9c --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112751.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112751", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.628Z", + "datePublished": "2026-11-10T18:18:01.927Z", + "dateUpdated": "2026-11-10T18:18:01.927Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Assistance Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Remote Assistance allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:01.927Z" + }, + "references": [ + { + "name": "Windows Remote Assistance Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112751" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112752.json b/data/2026/112xxx/CVE-2026-112752.json new file mode 100644 index 0000000000..a85c866159 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112752.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112752", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.628Z", + "datePublished": "2026-11-10T18:18:02.446Z", + "dateUpdated": "2026-11-10T18:18:02.446Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:02.446Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112752" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112753.json b/data/2026/112xxx/CVE-2026-112753.json new file mode 100644 index 0000000000..082b131460 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112753.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112753", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:02.967Z", + "dateUpdated": "2026-11-10T18:18:02.967Z" + }, + "containers": { + "cna": { + "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:02.967Z" + }, + "references": [ + { + "name": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112753" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112754.json b/data/2026/112xxx/CVE-2026-112754.json new file mode 100644 index 0000000000..7cc3a818e6 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112754.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112754", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:03.479Z", + "dateUpdated": "2026-11-10T18:18:03.479Z" + }, + "containers": { + "cna": { + "title": "Microsoft Graphics Component Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + }, + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:03.479Z" + }, + "references": [ + { + "name": "Microsoft Graphics Component Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112754" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112755.json b/data/2026/112xxx/CVE-2026-112755.json new file mode 100644 index 0000000000..453db446cb --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112755.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112755", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:04.112Z", + "dateUpdated": "2026-11-10T18:18:04.112Z" + }, + "containers": { + "cna": { + "title": "Windows RNDIS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows RNDIS allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:04.112Z" + }, + "references": [ + { + "name": "Windows RNDIS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112755" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112756.json b/data/2026/112xxx/CVE-2026-112756.json new file mode 100644 index 0000000000..b1323c1dad --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112756.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112756", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:04.675Z", + "dateUpdated": "2026-11-10T18:18:04.675Z" + }, + "containers": { + "cna": { + "title": "Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:04.675Z" + }, + "references": [ + { + "name": "Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112756" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112757.json b/data/2026/112xxx/CVE-2026-112757.json new file mode 100644 index 0000000000..bceb0eb24e --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112757.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112757", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:05.191Z", + "dateUpdated": "2026-11-10T18:18:05.191Z" + }, + "containers": { + "cna": { + "title": "Windows Secure Kernel Mode Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:05.191Z" + }, + "references": [ + { + "name": "Windows Secure Kernel Mode Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112757" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112758.json b/data/2026/112xxx/CVE-2026-112758.json new file mode 100644 index 0000000000..9f2bf43ec5 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112758.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112758", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:05.642Z", + "dateUpdated": "2026-11-10T18:18:05.642Z" + }, + "containers": { + "cna": { + "title": "Windows Defender Firewall Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:05.642Z" + }, + "references": [ + { + "name": "Windows Defender Firewall Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112758" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112759.json b/data/2026/112xxx/CVE-2026-112759.json new file mode 100644 index 0000000000..e2064f45c8 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112759.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112759", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:06.178Z", + "dateUpdated": "2026-11-10T18:18:06.178Z" + }, + "containers": { + "cna": { + "title": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:06.178Z" + }, + "references": [ + { + "name": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112759" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112760.json b/data/2026/112xxx/CVE-2026-112760.json new file mode 100644 index 0000000000..82e7431017 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112760.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112760", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:06.737Z", + "dateUpdated": "2026-11-10T18:18:06.737Z" + }, + "containers": { + "cna": { + "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Overlay Filter allows an unauthorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:06.737Z" + }, + "references": [ + { + "name": "Windows Overlay Filter Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112760" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112761.json b/data/2026/112xxx/CVE-2026-112761.json new file mode 100644 index 0000000000..b5e72b3241 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112761.json @@ -0,0 +1,281 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112761", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:07.358Z", + "dateUpdated": "2026-11-10T18:18:07.358Z" + }, + "containers": { + "cna": { + "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:07.358Z" + }, + "references": [ + { + "name": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112761" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112762.json b/data/2026/112xxx/CVE-2026-112762.json new file mode 100644 index 0000000000..8f6193c2ab --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112762.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112762", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:07.864Z", + "dateUpdated": "2026-11-10T18:18:07.864Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-23: Relative Path Traversal", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-23" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:07.864Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112762" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112763.json b/data/2026/112xxx/CVE-2026-112763.json new file mode 100644 index 0000000000..78e35b7a09 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112763.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112763", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:08.482Z", + "dateUpdated": "2026-11-10T18:18:08.482Z" + }, + "containers": { + "cna": { + "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:08.482Z" + }, + "references": [ + { + "name": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112763" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112764.json b/data/2026/112xxx/CVE-2026-112764.json new file mode 100644 index 0000000000..f37f04c50c --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112764.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112764", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:09.518Z", + "dateUpdated": "2026-11-10T18:18:09.518Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows USB Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:09.518Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112764" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112765.json b/data/2026/112xxx/CVE-2026-112765.json new file mode 100644 index 0000000000..c988bda150 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112765.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112765", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:10.061Z", + "dateUpdated": "2026-11-10T18:18:10.061Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:10.061Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112765" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112766.json b/data/2026/112xxx/CVE-2026-112766.json new file mode 100644 index 0000000000..a2cc8c8208 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112766.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112766", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:02:34.629Z", + "datePublished": "2026-11-10T18:18:10.566Z", + "dateUpdated": "2026-11-10T18:18:10.566Z" + }, + "containers": { + "cna": { + "title": "Windows exFAT File System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows exFAT File System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:10.566Z" + }, + "references": [ + { + "name": "Windows exFAT File System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112766" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112789.json b/data/2026/112xxx/CVE-2026-112789.json new file mode 100644 index 0000000000..bc768cd10e --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112789.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112789", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:11.116Z", + "dateUpdated": "2026-11-10T18:18:11.116Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:11.116Z" + }, + "references": [ + { + "name": "Windows Installer Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112789" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112790.json b/data/2026/112xxx/CVE-2026-112790.json new file mode 100644 index 0000000000..7d9aa3fe64 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112790.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112790", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:11.672Z", + "dateUpdated": "2026-11-10T18:18:11.672Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:11.672Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112790" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112791.json b/data/2026/112xxx/CVE-2026-112791.json new file mode 100644 index 0000000000..fe86e28715 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112791.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112791", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:12.120Z", + "dateUpdated": "2026-11-10T18:18:12.120Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:12.120Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112791" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112792.json b/data/2026/112xxx/CVE-2026-112792.json new file mode 100644 index 0000000000..b8458004b9 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112792.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112792", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:12.681Z", + "dateUpdated": "2026-11-10T18:18:12.681Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:12.681Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112792" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112793.json b/data/2026/112xxx/CVE-2026-112793.json new file mode 100644 index 0000000000..f2b0dd7079 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112793.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112793", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:13.185Z", + "dateUpdated": "2026-11-10T18:18:13.185Z" + }, + "containers": { + "cna": { + "title": "Windows Event Collector Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Event Collector Service allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:13.185Z" + }, + "references": [ + { + "name": "Windows Event Collector Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112793" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112794.json b/data/2026/112xxx/CVE-2026-112794.json new file mode 100644 index 0000000000..3ea8d814e2 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112794.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112794", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:13.713Z", + "dateUpdated": "2026-11-10T18:18:13.713Z" + }, + "containers": { + "cna": { + "title": "Windows Smart Card Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:13.713Z" + }, + "references": [ + { + "name": "Windows Smart Card Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112794" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112795.json b/data/2026/112xxx/CVE-2026-112795.json new file mode 100644 index 0000000000..086cce58a6 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112795.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112795", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:14.292Z", + "dateUpdated": "2026-11-10T18:18:14.292Z" + }, + "containers": { + "cna": { + "title": "Windows Security Account Manager Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Security Account Manager allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:14.292Z" + }, + "references": [ + { + "name": "Windows Security Account Manager Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112795" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112796.json b/data/2026/112xxx/CVE-2026-112796.json new file mode 100644 index 0000000000..0a15ddd40b --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112796.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112796", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:14.780Z", + "dateUpdated": "2026-11-10T18:18:14.780Z" + }, + "containers": { + "cna": { + "title": "Windows Event Collector Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Event Collector Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:14.780Z" + }, + "references": [ + { + "name": "Windows Event Collector Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112796" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112797.json b/data/2026/112xxx/CVE-2026-112797.json new file mode 100644 index 0000000000..839ce5deb0 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112797.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112797", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:15.247Z", + "dateUpdated": "2026-11-10T18:18:15.247Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:15.247Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112797" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112798.json b/data/2026/112xxx/CVE-2026-112798.json new file mode 100644 index 0000000000..00120a822e --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112798.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112798", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:15.751Z", + "dateUpdated": "2026-11-10T18:18:15.751Z" + }, + "containers": { + "cna": { + "title": "Windows NetBIOS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:15.751Z" + }, + "references": [ + { + "name": "Windows NetBIOS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112798" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112799.json b/data/2026/112xxx/CVE-2026-112799.json new file mode 100644 index 0000000000..57185dfae9 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112799.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112799", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:16.192Z", + "dateUpdated": "2026-11-10T18:18:16.192Z" + }, + "containers": { + "cna": { + "title": "Windows Projected File System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Projected File System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:16.192Z" + }, + "references": [ + { + "name": "Windows Projected File System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112799" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112800.json b/data/2026/112xxx/CVE-2026-112800.json new file mode 100644 index 0000000000..6bb01e2b1b --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112800.json @@ -0,0 +1,303 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112800", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.866Z", + "datePublished": "2026-11-10T18:18:16.698Z", + "dateUpdated": "2026-11-10T18:18:16.698Z" + }, + "containers": { + "cna": { + "title": "Windows Diagnostic Policy Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:16.698Z" + }, + "references": [ + { + "name": "Windows Diagnostic Policy Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112800" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112801.json b/data/2026/112xxx/CVE-2026-112801.json new file mode 100644 index 0000000000..d633681842 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112801.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112801", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:17.235Z", + "dateUpdated": "2026-11-10T18:18:17.235Z" + }, + "containers": { + "cna": { + "title": "Windows eSCL Scanner Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Insufficiently protected credentials in Windows eSCL Scanner allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-522: Insufficiently Protected Credentials", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-522" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:17.235Z" + }, + "references": [ + { + "name": "Windows eSCL Scanner Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112801" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112802.json b/data/2026/112xxx/CVE-2026-112802.json new file mode 100644 index 0000000000..42342a3239 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112802.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112802", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:17.827Z", + "dateUpdated": "2026-11-10T18:18:17.827Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:17.827Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112802" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112803.json b/data/2026/112xxx/CVE-2026-112803.json new file mode 100644 index 0000000000..72b8b266f4 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112803.json @@ -0,0 +1,385 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112803", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:18.307Z", + "dateUpdated": "2026-11-10T18:18:18.307Z" + }, + "containers": { + "cna": { + "title": "Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Information Disclosure", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:18.307Z" + }, + "references": [ + { + "name": "Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112803" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112804.json b/data/2026/112xxx/CVE-2026-112804.json new file mode 100644 index 0000000000..b77ae51680 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112804.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112804", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:18.824Z", + "dateUpdated": "2026-11-10T18:18:18.824Z" + }, + "containers": { + "cna": { + "title": "Windows exFAT File System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:18.824Z" + }, + "references": [ + { + "name": "Windows exFAT File System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112804" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112805.json b/data/2026/112xxx/CVE-2026-112805.json new file mode 100644 index 0000000000..97e735e889 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112805.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112805", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:19.371Z", + "dateUpdated": "2026-11-10T18:18:19.371Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:19.371Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112805" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112806.json b/data/2026/112xxx/CVE-2026-112806.json new file mode 100644 index 0000000000..e8ab7763a5 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112806.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112806", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:20.000Z", + "dateUpdated": "2026-11-10T18:18:20.000Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-522: Insufficiently Protected Credentials", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-522" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:20.000Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112806" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112807.json b/data/2026/112xxx/CVE-2026-112807.json new file mode 100644 index 0000000000..20f4df8203 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112807.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112807", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:20.562Z", + "dateUpdated": "2026-11-10T18:18:20.562Z" + }, + "containers": { + "cna": { + "title": "Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:20.562Z" + }, + "references": [ + { + "name": "Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112807" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112808.json b/data/2026/112xxx/CVE-2026-112808.json new file mode 100644 index 0000000000..5e3b4f7cd0 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112808.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112808", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:21.191Z", + "dateUpdated": "2026-11-10T18:18:21.191Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:21.191Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112808" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112809.json b/data/2026/112xxx/CVE-2026-112809.json new file mode 100644 index 0000000000..df9c7f3a05 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112809.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112809", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:21.667Z", + "dateUpdated": "2026-11-10T18:18:21.667Z" + }, + "containers": { + "cna": { + "title": "Windows Composite Image File System Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Composite Image File System allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Information Disclosure", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:21.667Z" + }, + "references": [ + { + "name": "Windows Composite Image File System Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112809" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112810.json b/data/2026/112xxx/CVE-2026-112810.json new file mode 100644 index 0000000000..e7f4b1cfbe --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112810.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112810", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:22.183Z", + "dateUpdated": "2026-11-10T18:18:22.183Z" + }, + "containers": { + "cna": { + "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:22.183Z" + }, + "references": [ + { + "name": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112810" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112811.json b/data/2026/112xxx/CVE-2026-112811.json new file mode 100644 index 0000000000..3f85c964eb --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112811.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112811", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:22.758Z", + "dateUpdated": "2026-11-10T18:18:22.758Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:22.758Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112811" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112812.json b/data/2026/112xxx/CVE-2026-112812.json new file mode 100644 index 0000000000..f52e297f87 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112812.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112812", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:23.306Z", + "dateUpdated": "2026-11-10T18:18:23.306Z" + }, + "containers": { + "cna": { + "title": "Windows SMB Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:23.306Z" + }, + "references": [ + { + "name": "Windows SMB Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112812" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112813.json b/data/2026/112xxx/CVE-2026-112813.json new file mode 100644 index 0000000000..753bfbe829 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112813.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112813", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.867Z", + "datePublished": "2026-11-10T18:18:23.843Z", + "dateUpdated": "2026-11-10T18:18:23.843Z" + }, + "containers": { + "cna": { + "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:23.843Z" + }, + "references": [ + { + "name": "Windows Overlay Filter Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112813" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112814.json b/data/2026/112xxx/CVE-2026-112814.json new file mode 100644 index 0000000000..6787caf531 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112814.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112814", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T18:16:14.868Z", + "datePublished": "2026-11-10T18:18:24.367Z", + "dateUpdated": "2026-11-10T18:18:24.367Z" + }, + "containers": { + "cna": { + "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:24.367Z" + }, + "references": [ + { + "name": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112814" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112965.json b/data/2026/112xxx/CVE-2026-112965.json new file mode 100644 index 0000000000..ad69dbe4f2 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112965.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112965", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:24.958Z", + "dateUpdated": "2026-11-10T18:18:24.958Z" + }, + "containers": { + "cna": { + "title": "Windows Management Instrumentation Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + }, + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:24.958Z" + }, + "references": [ + { + "name": "Windows Management Instrumentation Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112965" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112966.json b/data/2026/112xxx/CVE-2026-112966.json new file mode 100644 index 0000000000..82f456c954 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112966.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112966", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:25.552Z", + "dateUpdated": "2026-11-10T18:18:25.552Z" + }, + "containers": { + "cna": { + "title": "Windows Security Account Manager Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Uncontrolled resource consumption in Windows Security Account Manager allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-407: Inefficient Algorithmic Complexity", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-407" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:25.552Z" + }, + "references": [ + { + "name": "Windows Security Account Manager Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112966" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112967.json b/data/2026/112xxx/CVE-2026-112967.json new file mode 100644 index 0000000000..d47ca41153 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112967.json @@ -0,0 +1,281 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112967", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:26.069Z", + "dateUpdated": "2026-11-10T18:18:26.069Z" + }, + "containers": { + "cna": { + "title": "Windows Xbox Live Networking Service Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:26.069Z" + }, + "references": [ + { + "name": "Windows Xbox Live Networking Service Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112967" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112968.json b/data/2026/112xxx/CVE-2026-112968.json new file mode 100644 index 0000000000..c763a141e3 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112968.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112968", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:26.586Z", + "dateUpdated": "2026-11-10T18:18:26.586Z" + }, + "containers": { + "cna": { + "title": "Windows COM Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows COM allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:26.586Z" + }, + "references": [ + { + "name": "Windows COM Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112968" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112969.json b/data/2026/112xxx/CVE-2026-112969.json new file mode 100644 index 0000000000..5bfa778592 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112969.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112969", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:27.107Z", + "dateUpdated": "2026-11-10T18:18:27.107Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:27.107Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112969" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112970.json b/data/2026/112xxx/CVE-2026-112970.json new file mode 100644 index 0000000000..77a078842c --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112970.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112970", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:27.618Z", + "dateUpdated": "2026-11-10T18:18:27.618Z" + }, + "containers": { + "cna": { + "title": "Windows SMB Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:27.618Z" + }, + "references": [ + { + "name": "Windows SMB Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112970" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112971.json b/data/2026/112xxx/CVE-2026-112971.json new file mode 100644 index 0000000000..1321bc217b --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112971.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112971", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:28.134Z", + "dateUpdated": "2026-11-10T18:18:28.134Z" + }, + "containers": { + "cna": { + "title": "Windows SMB Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:28.134Z" + }, + "references": [ + { + "name": "Windows SMB Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112971" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112972.json b/data/2026/112xxx/CVE-2026-112972.json new file mode 100644 index 0000000000..fac3d0185d --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112972.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112972", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:28.646Z", + "dateUpdated": "2026-11-10T18:18:28.646Z" + }, + "containers": { + "cna": { + "title": "Windows SMBv3 Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:28.646Z" + }, + "references": [ + { + "name": "Windows SMBv3 Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112972" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112973.json b/data/2026/112xxx/CVE-2026-112973.json new file mode 100644 index 0000000000..1ae5a0a8d8 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112973.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112973", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.672Z", + "datePublished": "2026-11-10T18:18:29.246Z", + "dateUpdated": "2026-11-10T18:18:29.246Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:29.246Z" + }, + "references": [ + { + "name": "Windows Kernel Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112973" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112974.json b/data/2026/112xxx/CVE-2026-112974.json new file mode 100644 index 0000000000..a92a422138 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112974.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112974", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:29.775Z", + "dateUpdated": "2026-11-10T18:18:29.775Z" + }, + "containers": { + "cna": { + "title": "Microsoft Account Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:29.775Z" + }, + "references": [ + { + "name": "Microsoft Account Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112974" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112975.json b/data/2026/112xxx/CVE-2026-112975.json new file mode 100644 index 0000000000..0628a863df --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112975.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112975", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:30.407Z", + "dateUpdated": "2026-11-10T18:18:30.407Z" + }, + "containers": { + "cna": { + "title": "Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny service over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:30.407Z" + }, + "references": [ + { + "name": "Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112975" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112976.json b/data/2026/112xxx/CVE-2026-112976.json new file mode 100644 index 0000000000..e4b90ce0e7 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112976.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112976", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:31.047Z", + "dateUpdated": "2026-11-10T18:18:31.047Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:31.047Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112976" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112977.json b/data/2026/112xxx/CVE-2026-112977.json new file mode 100644 index 0000000000..dde652da90 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112977.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112977", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:31.607Z", + "dateUpdated": "2026-11-10T18:18:31.607Z" + }, + "containers": { + "cna": { + "title": "Windows Deployment Services Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:31.607Z" + }, + "references": [ + { + "name": "Windows Deployment Services Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112977" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112978.json b/data/2026/112xxx/CVE-2026-112978.json new file mode 100644 index 0000000000..cf5bd64c9a --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112978.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112978", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:32.173Z", + "dateUpdated": "2026-11-10T18:18:32.173Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:32.173Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112978" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112979.json b/data/2026/112xxx/CVE-2026-112979.json new file mode 100644 index 0000000000..6acc21ec5b --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112979.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112979", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:32.789Z", + "dateUpdated": "2026-11-10T18:18:32.789Z" + }, + "containers": { + "cna": { + "title": "Windows State Repository Service Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:32.789Z" + }, + "references": [ + { + "name": "Windows State Repository Service Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112979" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112980.json b/data/2026/112xxx/CVE-2026-112980.json new file mode 100644 index 0000000000..f9bf4918e2 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112980.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112980", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:33.304Z", + "dateUpdated": "2026-11-10T18:18:33.304Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:33.304Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112980" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112981.json b/data/2026/112xxx/CVE-2026-112981.json new file mode 100644 index 0000000000..c2b05a2c2c --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112981.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112981", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:33.814Z", + "dateUpdated": "2026-11-10T18:18:33.814Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:33.814Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112981" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112982.json b/data/2026/112xxx/CVE-2026-112982.json new file mode 100644 index 0000000000..6cc3769ffa --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112982.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112982", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:34.325Z", + "dateUpdated": "2026-11-10T18:18:34.325Z" + }, + "containers": { + "cna": { + "title": "Microsoft Account Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:34.325Z" + }, + "references": [ + { + "name": "Microsoft Account Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112982" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112984.json b/data/2026/112xxx/CVE-2026-112984.json new file mode 100644 index 0000000000..42c27590f5 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112984.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112984", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:34.944Z", + "dateUpdated": "2026-11-10T18:18:34.944Z" + }, + "containers": { + "cna": { + "title": "Windows USB Video Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:34.944Z" + }, + "references": [ + { + "name": "Windows USB Video Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112984" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112985.json b/data/2026/112xxx/CVE-2026-112985.json new file mode 100644 index 0000000000..149cfbbc6e --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112985.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112985", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.673Z", + "datePublished": "2026-11-10T18:18:35.542Z", + "dateUpdated": "2026-11-10T18:18:35.542Z" + }, + "containers": { + "cna": { + "title": "Windows JScript Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:35.542Z" + }, + "references": [ + { + "name": "Windows JScript Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112985" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112986.json b/data/2026/112xxx/CVE-2026-112986.json new file mode 100644 index 0000000000..3d80be31c9 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112986.json @@ -0,0 +1,364 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112986", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.674Z", + "datePublished": "2026-11-10T18:18:35.977Z", + "dateUpdated": "2026-11-10T18:18:35.977Z" + }, + "containers": { + "cna": { + "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:35.977Z" + }, + "references": [ + { + "name": "Windows DWM Core Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112986" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112987.json b/data/2026/112xxx/CVE-2026-112987.json new file mode 100644 index 0000000000..a50dc1c34b --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112987.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112987", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.674Z", + "datePublished": "2026-11-10T18:18:36.584Z", + "dateUpdated": "2026-11-10T18:18:36.584Z" + }, + "containers": { + "cna": { + "title": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:36.584Z" + }, + "references": [ + { + "name": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112987" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112988.json b/data/2026/112xxx/CVE-2026-112988.json new file mode 100644 index 0000000000..5ecca00c1f --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112988.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112988", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.674Z", + "datePublished": "2026-11-10T18:18:37.175Z", + "dateUpdated": "2026-11-10T18:18:37.175Z" + }, + "containers": { + "cna": { + "title": "Windows Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + }, + { + "description": "CWE-20: Improper Input Validation", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-20" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:37.175Z" + }, + "references": [ + { + "name": "Windows Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112988" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112989.json b/data/2026/112xxx/CVE-2026-112989.json new file mode 100644 index 0000000000..041d7d0c63 --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112989.json @@ -0,0 +1,191 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112989", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.674Z", + "datePublished": "2026-11-10T18:18:37.757Z", + "dateUpdated": "2026-11-10T18:18:37.757Z" + }, + "containers": { + "cna": { + "title": "Windows Servicing Stack Updates Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:37.757Z" + }, + "references": [ + { + "name": "Windows Servicing Stack Updates Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112989" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/112xxx/CVE-2026-112990.json b/data/2026/112xxx/CVE-2026-112990.json new file mode 100644 index 0000000000..543231817a --- /dev/null +++ b/data/2026/112xxx/CVE-2026-112990.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-112990", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-19T22:16:29.674Z", + "datePublished": "2026-11-10T18:18:38.264Z", + "dateUpdated": "2026-11-10T18:18:38.264Z" + }, + "containers": { + "cna": { + "title": "Windows USB Video Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:38.264Z" + }, + "references": [ + { + "name": "Windows USB Video Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112990" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113748.json b/data/2026/113xxx/CVE-2026-113748.json new file mode 100644 index 0000000000..3308c1664f --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113748.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113748", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.381Z", + "datePublished": "2026-11-10T18:18:38.769Z", + "dateUpdated": "2026-11-10T18:18:38.769Z" + }, + "containers": { + "cna": { + "title": "Software Protection Platform (SPP) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:38.769Z" + }, + "references": [ + { + "name": "Software Protection Platform (SPP) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113748" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113749.json b/data/2026/113xxx/CVE-2026-113749.json new file mode 100644 index 0000000000..5ac0a4e473 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113749.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113749", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.381Z", + "datePublished": "2026-11-10T18:18:39.355Z", + "dateUpdated": "2026-11-10T18:18:39.355Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows Codecs Library Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:39.355Z" + }, + "references": [ + { + "name": "Microsoft Windows Codecs Library Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113749" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113750.json b/data/2026/113xxx/CVE-2026-113750.json new file mode 100644 index 0000000000..ab8830a1d5 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113750.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113750", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:40.998Z", + "dateUpdated": "2026-11-10T18:18:40.998Z" + }, + "containers": { + "cna": { + "title": "Windows Device Inventory Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:40.998Z" + }, + "references": [ + { + "name": "Windows Device Inventory Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113750" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113751.json b/data/2026/113xxx/CVE-2026-113751.json new file mode 100644 index 0000000000..00d2436d0b --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113751.json @@ -0,0 +1,392 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113751", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:41.513Z", + "dateUpdated": "2026-11-10T18:18:41.513Z" + }, + "containers": { + "cna": { + "title": "Windows Fast FAT Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:41.513Z" + }, + "references": [ + { + "name": "Windows Fast FAT Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113751" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113752.json b/data/2026/113xxx/CVE-2026-113752.json new file mode 100644 index 0000000000..cadf0fa2a7 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113752.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113752", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:42.037Z", + "dateUpdated": "2026-11-10T18:18:42.037Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:42.037Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113752" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113753.json b/data/2026/113xxx/CVE-2026-113753.json new file mode 100644 index 0000000000..067a0d1585 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113753.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113753", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:42.635Z", + "dateUpdated": "2026-11-10T18:18:42.635Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:42.635Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113753" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.2, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113754.json b/data/2026/113xxx/CVE-2026-113754.json new file mode 100644 index 0000000000..1e781f9d5a --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113754.json @@ -0,0 +1,449 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113754", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:43.167Z", + "dateUpdated": "2026-11-10T18:18:43.167Z" + }, + "containers": { + "cna": { + "title": "Windows FileCrypt Driver Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Information Disclosure", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:43.167Z" + }, + "references": [ + { + "name": "Windows FileCrypt Driver Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113754" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113755.json b/data/2026/113xxx/CVE-2026-113755.json new file mode 100644 index 0000000000..fe596be2a0 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113755.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113755", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:43.626Z", + "dateUpdated": "2026-11-10T18:18:43.626Z" + }, + "containers": { + "cna": { + "title": "Windows Filter Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:43.626Z" + }, + "references": [ + { + "name": "Windows Filter Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113755" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113756.json b/data/2026/113xxx/CVE-2026-113756.json new file mode 100644 index 0000000000..abdb641fff --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113756.json @@ -0,0 +1,449 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113756", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:44.149Z", + "dateUpdated": "2026-11-10T18:18:44.149Z" + }, + "containers": { + "cna": { + "title": "Windows FileCrypt Driver Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Security Feature Bypass", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:44.149Z" + }, + "references": [ + { + "name": "Windows FileCrypt Driver Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113756" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113757.json b/data/2026/113xxx/CVE-2026-113757.json new file mode 100644 index 0000000000..d34a780fda --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113757.json @@ -0,0 +1,449 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113757", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:44.673Z", + "dateUpdated": "2026-11-10T18:18:44.673Z" + }, + "containers": { + "cna": { + "title": "Windows FileCrypt Driver Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Information Disclosure", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:44.673Z" + }, + "references": [ + { + "name": "Windows FileCrypt Driver Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113757" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113758.json b/data/2026/113xxx/CVE-2026-113758.json new file mode 100644 index 0000000000..4e8bc8f5ea --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113758.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113758", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:45.177Z", + "dateUpdated": "2026-11-10T18:18:45.177Z" + }, + "containers": { + "cna": { + "title": "Windows Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:45.177Z" + }, + "references": [ + { + "name": "Windows Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113758" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113759.json b/data/2026/113xxx/CVE-2026-113759.json new file mode 100644 index 0000000000..38341ce003 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113759.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113759", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:17:59.137Z", + "dateUpdated": "2026-11-10T18:17:59.137Z" + }, + "containers": { + "cna": { + "title": "Microsoft Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:59.137Z" + }, + "references": [ + { + "name": "Microsoft Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113759" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113760.json b/data/2026/113xxx/CVE-2026-113760.json new file mode 100644 index 0000000000..e5c4201c99 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113760.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113760", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:45.697Z", + "dateUpdated": "2026-11-10T18:18:45.697Z" + }, + "containers": { + "cna": { + "title": "Windows XWizard Framework Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:45.697Z" + }, + "references": [ + { + "name": "Windows XWizard Framework Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113760" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113761.json b/data/2026/113xxx/CVE-2026-113761.json new file mode 100644 index 0000000000..016d6cc1e1 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113761.json @@ -0,0 +1,111 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113761", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:46.284Z", + "dateUpdated": "2026-11-10T18:18:46.284Z" + }, + "containers": { + "cna": { + "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:46.284Z" + }, + "references": [ + { + "name": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113761" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113762.json b/data/2026/113xxx/CVE-2026-113762.json new file mode 100644 index 0000000000..5e16a00abf --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113762.json @@ -0,0 +1,281 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113762", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:46.835Z", + "dateUpdated": "2026-11-10T18:18:46.835Z" + }, + "containers": { + "cna": { + "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:46.835Z" + }, + "references": [ + { + "name": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113762" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113763.json b/data/2026/113xxx/CVE-2026-113763.json new file mode 100644 index 0000000000..a238311a97 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113763.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113763", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:47.352Z", + "dateUpdated": "2026-11-10T18:18:47.352Z" + }, + "containers": { + "cna": { + "title": "Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-327" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:47.352Z" + }, + "references": [ + { + "name": "Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113763" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.3, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113764.json b/data/2026/113xxx/CVE-2026-113764.json new file mode 100644 index 0000000000..da5365607e --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113764.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113764", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.382Z", + "datePublished": "2026-11-10T18:18:47.959Z", + "dateUpdated": "2026-11-10T18:18:47.959Z" + }, + "containers": { + "cna": { + "title": "Windows Projected File System Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:47.959Z" + }, + "references": [ + { + "name": "Windows Projected File System Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113764" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113765.json b/data/2026/113xxx/CVE-2026-113765.json new file mode 100644 index 0000000000..5ef6700092 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113765.json @@ -0,0 +1,236 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113765", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:48.508Z", + "dateUpdated": "2026-11-10T18:18:48.508Z" + }, + "containers": { + "cna": { + "title": "Windows File Server Resource Management Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:48.508Z" + }, + "references": [ + { + "name": "Windows File Server Resource Management Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113765" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113766.json b/data/2026/113xxx/CVE-2026-113766.json new file mode 100644 index 0000000000..d033072ae8 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113766.json @@ -0,0 +1,301 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113766", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:49.032Z", + "dateUpdated": "2026-11-10T18:18:49.032Z" + }, + "containers": { + "cna": { + "title": "Windows Language Experience Service Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Windows Language Experience Service allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:49.032Z" + }, + "references": [ + { + "name": "Windows Language Experience Service Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113766" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "LOW", + "baseScore": 3.3, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113767.json b/data/2026/113xxx/CVE-2026-113767.json new file mode 100644 index 0000000000..c1dbd0cf99 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113767.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113767", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:49.622Z", + "dateUpdated": "2026-11-10T18:18:49.622Z" + }, + "containers": { + "cna": { + "title": "Windows COM+ Event System Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-829" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:49.622Z" + }, + "references": [ + { + "name": "Windows COM+ Event System Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113767" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113768.json b/data/2026/113xxx/CVE-2026-113768.json new file mode 100644 index 0000000000..7acf4c0b4a --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113768.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113768", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:50.145Z", + "dateUpdated": "2026-11-10T18:18:50.145Z" + }, + "containers": { + "cna": { + "title": "Windows Performance Counters Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:50.145Z" + }, + "references": [ + { + "name": "Windows Performance Counters Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113768" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113769.json b/data/2026/113xxx/CVE-2026-113769.json new file mode 100644 index 0000000000..58fcd44e64 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113769.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113769", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:50.656Z", + "dateUpdated": "2026-11-10T18:18:50.656Z" + }, + "containers": { + "cna": { + "title": "Windows COM+ Event System Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:50.656Z" + }, + "references": [ + { + "name": "Windows COM+ Event System Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113769" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113770.json b/data/2026/113xxx/CVE-2026-113770.json new file mode 100644 index 0000000000..ce09d87735 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113770.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113770", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:51.246Z", + "dateUpdated": "2026-11-10T18:18:51.246Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:51.246Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113770" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113771.json b/data/2026/113xxx/CVE-2026-113771.json new file mode 100644 index 0000000000..c1cd63903b --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113771.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113771", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:51.682Z", + "dateUpdated": "2026-11-10T18:18:51.682Z" + }, + "containers": { + "cna": { + "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Off-by-one error in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-193: Off-by-one Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-193" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:51.682Z" + }, + "references": [ + { + "name": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113771" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113772.json b/data/2026/113xxx/CVE-2026-113772.json new file mode 100644 index 0000000000..ce54c5472c --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113772.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113772", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:52.202Z", + "dateUpdated": "2026-11-10T18:18:52.202Z" + }, + "containers": { + "cna": { + "title": "Windows Redirected Drive Buffering Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:52.202Z" + }, + "references": [ + { + "name": "Windows Redirected Drive Buffering Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113772" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113773.json b/data/2026/113xxx/CVE-2026-113773.json new file mode 100644 index 0000000000..4fea3a204e --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113773.json @@ -0,0 +1,229 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113773", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T17:21:17.383Z", + "datePublished": "2026-11-10T18:18:52.730Z", + "dateUpdated": "2026-11-10T18:18:52.730Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Spoofing", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:52.730Z" + }, + "references": [ + { + "name": "Windows DHCP Server Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113773" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113814.json b/data/2026/113xxx/CVE-2026-113814.json new file mode 100644 index 0000000000..876fccc9b4 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113814.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113814", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.739Z", + "datePublished": "2026-11-10T18:18:53.244Z", + "dateUpdated": "2026-11-10T18:18:53.244Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Spaces Controller Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:53.244Z" + }, + "references": [ + { + "name": "Windows Storage Spaces Controller Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113814" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113815.json b/data/2026/113xxx/CVE-2026-113815.json new file mode 100644 index 0000000000..febaec6210 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113815.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113815", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.739Z", + "datePublished": "2026-11-10T18:18:53.903Z", + "dateUpdated": "2026-11-10T18:18:53.903Z" + }, + "containers": { + "cna": { + "title": "Microsoft PowerShell Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:53.903Z" + }, + "references": [ + { + "name": "Microsoft PowerShell Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113815" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113816.json b/data/2026/113xxx/CVE-2026-113816.json new file mode 100644 index 0000000000..c2b441b74b --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113816.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113816", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.739Z", + "datePublished": "2026-11-10T18:18:54.491Z", + "dateUpdated": "2026-11-10T18:18:54.491Z" + }, + "containers": { + "cna": { + "title": "Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:54.491Z" + }, + "references": [ + { + "name": "Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113816" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.1, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113817.json b/data/2026/113xxx/CVE-2026-113817.json new file mode 100644 index 0000000000..81080bc666 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113817.json @@ -0,0 +1,303 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113817", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.739Z", + "datePublished": "2026-11-10T18:18:55.098Z", + "dateUpdated": "2026-11-10T18:18:55.098Z" + }, + "containers": { + "cna": { + "title": "Windows Devices Human Interface Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:55.098Z" + }, + "references": [ + { + "name": "Windows Devices Human Interface Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113817" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113818.json b/data/2026/113xxx/CVE-2026-113818.json new file mode 100644 index 0000000000..9b7198741f --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113818.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113818", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.739Z", + "datePublished": "2026-11-10T18:18:55.738Z", + "dateUpdated": "2026-11-10T18:18:55.738Z" + }, + "containers": { + "cna": { + "title": "Windows Deployment Services Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-23: Relative Path Traversal", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-23" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:55.738Z" + }, + "references": [ + { + "name": "Windows Deployment Services Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113818" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113819.json b/data/2026/113xxx/CVE-2026-113819.json new file mode 100644 index 0000000000..e42843f0e9 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113819.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113819", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.740Z", + "datePublished": "2026-11-10T18:18:56.246Z", + "dateUpdated": "2026-11-10T18:18:56.246Z" + }, + "containers": { + "cna": { + "title": "Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:56.246Z" + }, + "references": [ + { + "name": "Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113819" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113820.json b/data/2026/113xxx/CVE-2026-113820.json new file mode 100644 index 0000000000..85817c319c --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113820.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113820", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.740Z", + "datePublished": "2026-11-10T18:18:56.771Z", + "dateUpdated": "2026-11-10T18:18:56.771Z" + }, + "containers": { + "cna": { + "title": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:56.771Z" + }, + "references": [ + { + "name": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113820" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113821.json b/data/2026/113xxx/CVE-2026-113821.json new file mode 100644 index 0000000000..a610fc36c1 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113821.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113821", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.740Z", + "datePublished": "2026-11-10T18:18:57.396Z", + "dateUpdated": "2026-11-10T18:18:57.396Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows SCSI Class System File Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:57.396Z" + }, + "references": [ + { + "name": "Microsoft Windows SCSI Class System File Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113821" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.1, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113822.json b/data/2026/113xxx/CVE-2026-113822.json new file mode 100644 index 0000000000..8bef3ee1e5 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113822.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113822", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.740Z", + "datePublished": "2026-11-10T18:17:59.673Z", + "dateUpdated": "2026-11-10T18:17:59.673Z" + }, + "containers": { + "cna": { + "title": "Azure CycleCloud Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "8.10.1-3968" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure CycleCloud 8.9.1", + "versions": [ + { + "version": "1.0.0", + "lessThan": "8.10.1-3968", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:59.673Z" + }, + "references": [ + { + "name": "Azure CycleCloud Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113822" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113823.json b/data/2026/113xxx/CVE-2026-113823.json new file mode 100644 index 0000000000..c357fd2a1b --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113823.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113823", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.740Z", + "datePublished": "2026-11-10T18:18:00.267Z", + "dateUpdated": "2026-11-10T18:18:00.267Z" + }, + "containers": { + "cna": { + "title": "Azure CycleCloud Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.9.2", + "versionEndExcluding": "8.10.1" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure CycleCloud 8.9.2", + "platforms": [ + "Linux" + ], + "versions": [ + { + "version": "8.9.2", + "lessThan": "8.10.1", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-22" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:00.267Z" + }, + "references": [ + { + "name": "Azure CycleCloud Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113823" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113825.json b/data/2026/113xxx/CVE-2026-113825.json new file mode 100644 index 0000000000..7d6d47987d --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113825.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113825", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T18:55:01.740Z", + "datePublished": "2026-11-10T18:18:57.919Z", + "dateUpdated": "2026-11-10T18:18:57.919Z" + }, + "containers": { + "cna": { + "title": "Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server Network Transport Driver (srvnet.sys) allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:18:57.919Z" + }, + "references": [ + { + "name": "Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113825" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113842.json b/data/2026/113xxx/CVE-2026-113842.json new file mode 100644 index 0000000000..2a3a8ddf5f --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113842.json @@ -0,0 +1,281 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113842", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.280Z", + "datePublished": "2026-11-10T18:19:04.492Z", + "dateUpdated": "2026-11-10T18:19:04.492Z" + }, + "containers": { + "cna": { + "title": "Windows Security Center Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:04.492Z" + }, + "references": [ + { + "name": "Windows Security Center Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113842" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113843.json b/data/2026/113xxx/CVE-2026-113843.json new file mode 100644 index 0000000000..4402d5146a --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113843.json @@ -0,0 +1,449 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113843", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.280Z", + "datePublished": "2026-11-10T18:19:05.116Z", + "dateUpdated": "2026-11-10T18:19:05.116Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Access Connection Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Elevation of Privilege", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:05.116Z" + }, + "references": [ + { + "name": "Windows Remote Access Connection Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113843" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113844.json b/data/2026/113xxx/CVE-2026-113844.json new file mode 100644 index 0000000000..ad0f7398c8 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113844.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113844", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.281Z", + "datePublished": "2026-11-10T18:19:05.650Z", + "dateUpdated": "2026-11-10T18:19:05.650Z" + }, + "containers": { + "cna": { + "title": "Windows NTFS Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639: Authorization Bypass Through User-Controlled Key", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-639" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:05.650Z" + }, + "references": [ + { + "name": "Windows NTFS Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113844" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113847.json b/data/2026/113xxx/CVE-2026-113847.json new file mode 100644 index 0000000000..285b59a67b --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113847.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113847", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.281Z", + "datePublished": "2026-11-10T18:19:06.336Z", + "dateUpdated": "2026-11-10T18:19:06.336Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:06.336Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113847" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113848.json b/data/2026/113xxx/CVE-2026-113848.json new file mode 100644 index 0000000000..a3441c5e2e --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113848.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113848", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.281Z", + "datePublished": "2026-11-10T18:19:07.111Z", + "dateUpdated": "2026-11-10T18:19:07.111Z" + }, + "containers": { + "cna": { + "title": "Windows NTFS Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:07.111Z" + }, + "references": [ + { + "name": "Windows NTFS Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113848" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113855.json b/data/2026/113xxx/CVE-2026-113855.json new file mode 100644 index 0000000000..d10f5125dd --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113855.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113855", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.282Z", + "datePublished": "2026-11-10T18:19:07.710Z", + "dateUpdated": "2026-11-10T18:19:07.710Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:07.710Z" + }, + "references": [ + { + "name": "Windows DNS Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113855" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113856.json b/data/2026/113xxx/CVE-2026-113856.json new file mode 100644 index 0000000000..9c88dbd010 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113856.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113856", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.282Z", + "datePublished": "2026-11-10T18:19:08.325Z", + "dateUpdated": "2026-11-10T18:19:08.325Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:08.325Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113856" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113859.json b/data/2026/113xxx/CVE-2026-113859.json new file mode 100644 index 0000000000..a80da21041 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113859.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113859", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.282Z", + "datePublished": "2026-11-10T18:19:08.831Z", + "dateUpdated": "2026-11-10T18:19:08.831Z" + }, + "containers": { + "cna": { + "title": "Windows TCP/IP Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:08.831Z" + }, + "references": [ + { + "name": "Windows TCP/IP Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113859" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113860.json b/data/2026/113xxx/CVE-2026-113860.json new file mode 100644 index 0000000000..43f8d98388 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113860.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113860", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.282Z", + "datePublished": "2026-11-10T18:19:09.362Z", + "dateUpdated": "2026-11-10T18:19:09.362Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:09.362Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113860" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113861.json b/data/2026/113xxx/CVE-2026-113861.json new file mode 100644 index 0000000000..271fa3cfab --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113861.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113861", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.283Z", + "datePublished": "2026-11-10T18:19:09.885Z", + "dateUpdated": "2026-11-10T18:19:09.885Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:09.885Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113861" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113862.json b/data/2026/113xxx/CVE-2026-113862.json new file mode 100644 index 0000000000..2ce304c705 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113862.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113862", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.283Z", + "datePublished": "2026-11-10T18:19:10.468Z", + "dateUpdated": "2026-11-10T18:19:10.468Z" + }, + "containers": { + "cna": { + "title": "Windows Network Address Translation (NAT) Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:10.468Z" + }, + "references": [ + { + "name": "Windows Network Address Translation (NAT) Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113862" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113863.json b/data/2026/113xxx/CVE-2026-113863.json new file mode 100644 index 0000000000..8fa2a21bdd --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113863.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113863", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.283Z", + "datePublished": "2026-11-10T18:19:11.026Z", + "dateUpdated": "2026-11-10T18:19:11.026Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:11.026Z" + }, + "references": [ + { + "name": "Windows DHCP Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113863" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113864.json b/data/2026/113xxx/CVE-2026-113864.json new file mode 100644 index 0000000000..a1806273e3 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113864.json @@ -0,0 +1,446 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113864", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.283Z", + "datePublished": "2026-11-10T18:19:11.468Z", + "dateUpdated": "2026-11-10T18:19:11.468Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:11.468Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113864" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/113xxx/CVE-2026-113865.json b/data/2026/113xxx/CVE-2026-113865.json new file mode 100644 index 0000000000..32c1f25ce7 --- /dev/null +++ b/data/2026/113xxx/CVE-2026-113865.json @@ -0,0 +1,320 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-113865", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T19:03:07.283Z", + "datePublished": "2026-11-10T18:19:11.929Z", + "dateUpdated": "2026-11-10T18:19:11.929Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:11.929Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113865" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114146.json b/data/2026/114xxx/CVE-2026-114146.json new file mode 100644 index 0000000000..8498485ed3 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114146.json @@ -0,0 +1,371 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114146", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.316Z", + "datePublished": "2026-11-10T18:19:12.520Z", + "dateUpdated": "2026-11-10T18:19:12.520Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.aspnetcore.http.connections:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.2.0", + "versionEndExcluding": "1.2.14" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Linux", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Mac OS", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Linux", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Mac OS", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Linux", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Mac OS", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2022 version 17.14", + "versions": [ + { + "version": "17.14.0", + "lessThan": "17.14.45", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.AspNetCore.Http.Connections", + "versions": [ + { + "version": "1.2.0", + "lessThan": "1.2.14", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:12.520Z" + }, + "references": [ + { + "name": "ASP.NET Core Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114146" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114147.json b/data/2026/114xxx/CVE-2026-114147.json new file mode 100644 index 0000000000..dd648099d5 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114147.json @@ -0,0 +1,385 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114147", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.316Z", + "datePublished": "2026-11-10T18:19:13.109Z", + "dateUpdated": "2026-11-10T18:19:13.109Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.stackexchangeredis:*:*:*:*:*:*:*:*", + "versionStartIncluding": "NOT_YET_AVAILABLE", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Linux", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Mac OS", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Linux", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Mac OS", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Linux", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Mac OS", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2022 version 17.14", + "versions": [ + { + "version": "17.14.0", + "lessThan": "17.14.45", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.AspNetCore.SignalR.StackExchangeRedis", + "platforms": [ + ".NET 10.0 installed on Linux", + ".NET 10.0 installed on Mac OS", + ".NET 10.0 installed on Windows", + ".NET 11.0 installed on Linux", + ".NET 11.0 installed on Mac OS", + ".NET 11.0 installed on Windows", + ".NET 8.0 installed on Linux", + ".NET 8.0 installed on Mac OS", + ".NET 8.0 installed on Windows", + ".NET 9.0 installed on Linux", + ".NET 9.0 installed on Mac OS", + ".NET 9.0 installed on Windows" + ], + "versions": [ + { + "version": "NOT_YET_AVAILABLE", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:13.109Z" + }, + "references": [ + { + "name": "ASP.NET Core Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114147" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114149.json b/data/2026/114xxx/CVE-2026-114149.json new file mode 100644 index 0000000000..8634e67649 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114149.json @@ -0,0 +1,371 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114149", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.316Z", + "datePublished": "2026-11-10T18:19:13.623Z", + "dateUpdated": "2026-11-10T18:19:13.623Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.aspnetcore.webutilities:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.3.12", + "versionEndExcluding": "10.0.15" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Linux", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Mac OS", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Linux", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Mac OS", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Linux", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Mac OS", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2022 version 17.14", + "versions": [ + { + "version": "17.14.0", + "lessThan": "17.14.45", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.AspNetCore.WebUtilities", + "versions": [ + { + "version": "2.3.12", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-770: Allocation of Resources Without Limits or Throttling", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-770" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:13.623Z" + }, + "references": [ + { + "name": "ASP.NET Core Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114149" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114150.json b/data/2026/114xxx/CVE-2026-114150.json new file mode 100644 index 0000000000..85b993f601 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114150.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114150", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.316Z", + "datePublished": "2026-11-10T18:19:14.142Z", + "dateUpdated": "2026-11-10T18:19:14.142Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:14.142Z" + }, + "references": [ + { + "name": "ASP.NET Core Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114150" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114151.json b/data/2026/114xxx/CVE-2026-114151.json new file mode 100644 index 0000000000..496ca082ca --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114151.json @@ -0,0 +1,179 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114151", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:19:14.695Z", + "dateUpdated": "2026-11-10T18:19:14.695Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-502: Deserialization of Untrusted Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-502" + }, + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:14.695Z" + }, + "references": [ + { + "name": "Visual Studio Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114151" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114152.json b/data/2026/114xxx/CVE-2026-114152.json new file mode 100644 index 0000000000..8318715d15 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114152.json @@ -0,0 +1,179 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114152", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:19:15.201Z", + "dateUpdated": "2026-11-10T18:19:15.201Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:15.201Z" + }, + "references": [ + { + "name": "Visual Studio Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114152" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114154.json b/data/2026/114xxx/CVE-2026-114154.json new file mode 100644 index 0000000000..ad5d8dcd3f --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114154.json @@ -0,0 +1,191 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114154", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:19:15.771Z", + "dateUpdated": "2026-11-10T18:19:15.771Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2022 version 17.14", + "versions": [ + { + "version": "17.14.0", + "lessThan": "17.14.45", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:15.771Z" + }, + "references": [ + { + "name": "ASP.NET Core Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114154" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114155.json b/data/2026/114xxx/CVE-2026-114155.json new file mode 100644 index 0000000000..3151b9ae6b --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114155.json @@ -0,0 +1,177 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114155", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:19:16.288Z", + "dateUpdated": "2026-11-10T18:19:16.288Z" + }, + "containers": { + "cna": { + "title": ".NET Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.dotnet.hotreload.watch.aspire:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.300", + "versionEndExcluding": "11.0.100" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.404" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.404" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.100" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.100" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Linux", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.404", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Mac OS", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.404", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.100", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.100", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.DotNet.HotReload.Watch.Aspire", + "platforms": [ + "Linux", + "Mac OS" + ], + "versions": [ + { + "version": "10.0.300", + "lessThan": "11.0.100", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:16.288Z" + }, + "references": [ + { + "name": ".NET Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114155" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114156.json b/data/2026/114xxx/CVE-2026-114156.json new file mode 100644 index 0000000000..526411b98a --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114156.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114156", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:19:16.822Z", + "dateUpdated": "2026-11-10T18:19:16.822Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-41: Improper Resolution of Path Equivalence", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-41" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:16.822Z" + }, + "references": [ + { + "name": "ASP.NET Core Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114156" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114157.json b/data/2026/114xxx/CVE-2026-114157.json new file mode 100644 index 0000000000..fe1700d505 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114157.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114157", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:19:17.405Z", + "dateUpdated": "2026-11-10T18:19:17.405Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.45" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2022 version 17.14", + "versions": [ + { + "version": "17.14.0", + "lessThan": "17.14.45", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:17.405Z" + }, + "references": [ + { + "name": "ASP.NET Core Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114157" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114158.json b/data/2026/114xxx/CVE-2026-114158.json new file mode 100644 index 0000000000..13c1467616 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114158.json @@ -0,0 +1,191 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114158", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:19:17.944Z", + "dateUpdated": "2026-11-10T18:19:17.944Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:17.944Z" + }, + "references": [ + { + "name": "Visual Studio Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114158" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114159.json b/data/2026/114xxx/CVE-2026-114159.json new file mode 100644 index 0000000000..5ac598e670 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114159.json @@ -0,0 +1,191 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114159", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:19:18.539Z", + "dateUpdated": "2026-11-10T18:19:18.539Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:18.539Z" + }, + "references": [ + { + "name": "Visual Studio Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114159" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114160.json b/data/2026/114xxx/CVE-2026-114160.json new file mode 100644 index 0000000000..2af74b4ced --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114160.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114160", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:20:45.229Z", + "dateUpdated": "2026-11-10T18:20:45.229Z" + }, + "containers": { + "cna": { + "title": "Azure Managed Grafana Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_managed_grafana:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "publication" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Managed Grafana", + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "publication", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "No cwe for this issue in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-918" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:45.229Z" + }, + "references": [ + { + "name": "Azure Managed Grafana Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114160" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114161.json b/data/2026/114xxx/CVE-2026-114161.json new file mode 100644 index 0000000000..fc66fab4b5 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114161.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114161", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:20:44.247Z", + "dateUpdated": "2026-11-10T18:20:44.247Z" + }, + "containers": { + "cna": { + "title": "Azure CycleCloud Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.9.2", + "versionEndExcluding": "8.10.1" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure CycleCloud 8.9.2", + "versions": [ + { + "version": "8.9.2", + "lessThan": "8.10.1", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-22" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:44.247Z" + }, + "references": [ + { + "name": "Azure CycleCloud Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114161" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114162.json b/data/2026/114xxx/CVE-2026-114162.json new file mode 100644 index 0000000000..fe0c59f58c --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114162.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114162", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:21:38.593Z", + "dateUpdated": "2026-11-10T18:21:38.593Z" + }, + "containers": { + "cna": { + "title": "Microsoft Graph Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_privileged_management:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "2.0.32.2053" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Privileged Identity Management (PIM)", + "versions": [ + { + "version": "1.0.0", + "lessThan": "2.0.32.2053", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:38.593Z" + }, + "references": [ + { + "name": "Microsoft Graph Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114162" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114164.json b/data/2026/114xxx/CVE-2026-114164.json new file mode 100644 index 0000000000..8a2b10c01b --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114164.json @@ -0,0 +1,167 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114164", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:15:13.134Z", + "dateUpdated": "2026-11-10T18:15:13.134Z" + }, + "containers": { + "cna": { + "title": "HEVC Video Extensions Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions_from_device_manufacturer:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.0.0.0", + "versionEndExcluding": "2.4.149.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "2.4.151.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions_for_licensed_appplications:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.0.0.0", + "versionEndExcluding": "2.4.150.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "1.0.0", + "lessThan": "2.4.151.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions for Licensed Applications", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "2.0.0.0", + "lessThan": "2.4.150.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions from Device Manufacturer", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "2.0.0.0", + "lessThan": "2.4.149.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:13.134Z" + }, + "references": [ + { + "name": "HEVC Video Extensions Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114164" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114165.json b/data/2026/114xxx/CVE-2026-114165.json new file mode 100644 index 0000000000..f53ac32245 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114165.json @@ -0,0 +1,167 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114165", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:15:13.574Z", + "dateUpdated": "2026-11-10T18:15:13.574Z" + }, + "containers": { + "cna": { + "title": "HEVC Video Extensions Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions_from_device_manufacturer:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.0.0.0", + "versionEndExcluding": "2.4.149.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "2.4.151.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions_for_licensed_appplications:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.0.0.0", + "versionEndExcluding": "2.4.150.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "1.0.0", + "lessThan": "2.4.151.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions for Licensed Applications", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "2.0.0.0", + "lessThan": "2.4.150.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions from Device Manufacturer", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "2.0.0.0", + "lessThan": "2.4.149.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:13.574Z" + }, + "references": [ + { + "name": "HEVC Video Extensions Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114165" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114166.json b/data/2026/114xxx/CVE-2026-114166.json new file mode 100644 index 0000000000..6a545c7db4 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114166.json @@ -0,0 +1,110 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114166", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.317Z", + "datePublished": "2026-11-10T18:15:14.104Z", + "dateUpdated": "2026-11-10T18:15:14.104Z" + }, + "containers": { + "cna": { + "title": "Microsoft Raw Image Extension Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.1.0.0", + "versionEndExcluding": "2.4.43.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Raw Image Extension", + "platforms": [ + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "2.1.0.0", + "lessThan": "2.4.43.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:14.104Z" + }, + "references": [ + { + "name": "Microsoft Raw Image Extension Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114166" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114167.json b/data/2026/114xxx/CVE-2026-114167.json new file mode 100644 index 0000000000..f1765f4bdd --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114167.json @@ -0,0 +1,167 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114167", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.318Z", + "datePublished": "2026-11-10T18:15:14.893Z", + "dateUpdated": "2026-11-10T18:15:14.893Z" + }, + "containers": { + "cna": { + "title": "HEVC Video Extensions Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions_from_device_manufacturer:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.0.0.0", + "versionEndExcluding": "2.4.149.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "2.4.151.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:hevc_video_extensions_for_licensed_appplications:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.0.0.0", + "versionEndExcluding": "2.4.150.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "1.0.0", + "lessThan": "2.4.151.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions for Licensed Applications", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "2.0.0.0", + "lessThan": "2.4.150.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "HEVC Video Extensions from Device Manufacturer", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "2.0.0.0", + "lessThan": "2.4.149.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:14.893Z" + }, + "references": [ + { + "name": "HEVC Video Extensions Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114167" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114169.json b/data/2026/114xxx/CVE-2026-114169.json new file mode 100644 index 0000000000..a5d2019c58 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114169.json @@ -0,0 +1,111 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114169", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.318Z", + "datePublished": "2026-11-10T18:15:15.498Z", + "dateUpdated": "2026-11-10T18:15:15.498Z" + }, + "containers": { + "cna": { + "title": "Windows Raw Image Extension Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.1.0.0", + "versionEndExcluding": "publication" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Raw Image Extension", + "platforms": [ + "Windows 10 version 1809", + "Windows 10 version 21H2", + "Windows 10 version 22H2", + "Windows 11 version 23H2", + "Windows 11 version 24H2", + "Windows 11 version 25H2", + "Windows 11 version 26H1", + "Windows 11 version 26H2" + ], + "versions": [ + { + "version": "2.1.0.0", + "lessThan": "publication", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:15.498Z" + }, + "references": [ + { + "name": "Windows Raw Image Extension Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114169" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114170.json b/data/2026/114xxx/CVE-2026-114170.json new file mode 100644 index 0000000000..6a09d8e1e8 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114170.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114170", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.318Z", + "datePublished": "2026-11-10T18:15:16.020Z", + "dateUpdated": "2026-11-10T18:15:16.020Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:16.020Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114170" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/114xxx/CVE-2026-114171.json b/data/2026/114xxx/CVE-2026-114171.json new file mode 100644 index 0000000000..dfa855c919 --- /dev/null +++ b/data/2026/114xxx/CVE-2026-114171.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-114171", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-20T21:56:39.318Z", + "datePublished": "2026-11-10T18:22:25.327Z", + "dateUpdated": "2026-11-10T18:22:25.327Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "User interface (ui) misrepresentation of critical information in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-451: User Interface (UI) Misrepresentation of Critical Information", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-451" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:25.327Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114171" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116697.json b/data/2026/116xxx/CVE-2026-116697.json new file mode 100644 index 0000000000..06236e0b11 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116697.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116697", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.919Z", + "datePublished": "2026-11-10T18:20:11.459Z", + "dateUpdated": "2026-11-10T18:20:11.459Z" + }, + "containers": { + "cna": { + "title": "Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:11.459Z" + }, + "references": [ + { + "name": "Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116697" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116698.json b/data/2026/116xxx/CVE-2026-116698.json new file mode 100644 index 0000000000..7e223114ca --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116698.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116698", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.920Z", + "datePublished": "2026-11-10T18:20:11.962Z", + "dateUpdated": "2026-11-10T18:20:11.962Z" + }, + "containers": { + "cna": { + "title": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:11.962Z" + }, + "references": [ + { + "name": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116698" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116699.json b/data/2026/116xxx/CVE-2026-116699.json new file mode 100644 index 0000000000..85cc3acb45 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116699.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116699", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.920Z", + "datePublished": "2026-11-10T18:20:12.514Z", + "dateUpdated": "2026-11-10T18:20:12.514Z" + }, + "containers": { + "cna": { + "title": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:12.514Z" + }, + "references": [ + { + "name": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116699" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116700.json b/data/2026/116xxx/CVE-2026-116700.json new file mode 100644 index 0000000000..350823e6de --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116700.json @@ -0,0 +1,326 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116700", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.920Z", + "datePublished": "2026-11-10T18:20:13.119Z", + "dateUpdated": "2026-11-10T18:20:13.119Z" + }, + "containers": { + "cna": { + "title": "Windows Telephony Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:13.119Z" + }, + "references": [ + { + "name": "Windows Telephony Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116700" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116706.json b/data/2026/116xxx/CVE-2026-116706.json new file mode 100644 index 0000000000..a8beebbac6 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116706.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116706", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.920Z", + "datePublished": "2026-11-10T18:20:13.884Z", + "dateUpdated": "2026-11-10T18:20:13.884Z" + }, + "containers": { + "cna": { + "title": "Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:13.884Z" + }, + "references": [ + { + "name": "Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116706" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116707.json b/data/2026/116xxx/CVE-2026-116707.json new file mode 100644 index 0000000000..9ce0f3c847 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116707.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116707", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.921Z", + "datePublished": "2026-11-10T18:20:14.433Z", + "dateUpdated": "2026-11-10T18:20:14.433Z" + }, + "containers": { + "cna": { + "title": "Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:14.433Z" + }, + "references": [ + { + "name": "Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116707" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116710.json b/data/2026/116xxx/CVE-2026-116710.json new file mode 100644 index 0000000000..86d07d6616 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116710.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116710", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.921Z", + "datePublished": "2026-11-10T18:20:14.998Z", + "dateUpdated": "2026-11-10T18:20:14.998Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:14.998Z" + }, + "references": [ + { + "name": "Windows Message Queuing Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116710" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116714.json b/data/2026/116xxx/CVE-2026-116714.json new file mode 100644 index 0000000000..e632ee094f --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116714.json @@ -0,0 +1,192 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116714", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.921Z", + "datePublished": "2026-11-10T18:22:03.209Z", + "dateUpdated": "2026-11-10T18:22:03.209Z" + }, + "containers": { + "cna": { + "title": "Windows AppX Deployment Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:03.209Z" + }, + "references": [ + { + "name": "Windows AppX Deployment Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116714" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116717.json b/data/2026/116xxx/CVE-2026-116717.json new file mode 100644 index 0000000000..a96ccd8531 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116717.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116717", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.922Z", + "datePublished": "2026-11-10T18:24:16.843Z", + "dateUpdated": "2026-11-10T18:24:16.843Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:16.843Z" + }, + "references": [ + { + "name": "Microsoft Office Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116717" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116718.json b/data/2026/116xxx/CVE-2026-116718.json new file mode 100644 index 0000000000..caddaae7c4 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116718.json @@ -0,0 +1,181 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116718", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.922Z", + "datePublished": "2026-11-10T18:24:17.375Z", + "dateUpdated": "2026-11-10T18:24:17.375Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:17.375Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116718" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116719.json b/data/2026/116xxx/CVE-2026-116719.json new file mode 100644 index 0000000000..7a43bf9d06 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116719.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116719", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.922Z", + "datePublished": "2026-11-10T18:24:17.862Z", + "dateUpdated": "2026-11-10T18:24:17.862Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:17.862Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116719" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116720.json b/data/2026/116xxx/CVE-2026-116720.json new file mode 100644 index 0000000000..c7c71379b6 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116720.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116720", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.922Z", + "datePublished": "2026-11-10T18:24:18.453Z", + "dateUpdated": "2026-11-10T18:24:18.453Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:18.453Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116720" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116721.json b/data/2026/116xxx/CVE-2026-116721.json new file mode 100644 index 0000000000..ff4648d612 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116721.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116721", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.922Z", + "datePublished": "2026-11-10T18:24:18.920Z", + "dateUpdated": "2026-11-10T18:24:18.920Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:18.920Z" + }, + "references": [ + { + "name": "Microsoft Office Word Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116721" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116722.json b/data/2026/116xxx/CVE-2026-116722.json new file mode 100644 index 0000000000..52c6edf8e0 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116722.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116722", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-26T20:11:53.922Z", + "datePublished": "2026-11-10T18:24:19.456Z", + "dateUpdated": "2026-11-10T18:24:19.456Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:19.456Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116722" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116922.json b/data/2026/116xxx/CVE-2026-116922.json new file mode 100644 index 0000000000..d4f12d2b2f --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116922.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116922", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.544Z", + "datePublished": "2026-11-10T18:24:19.914Z", + "dateUpdated": "2026-11-10T18:24:19.914Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:19.914Z" + }, + "references": [ + { + "name": "Microsoft Office PowerPoint Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116922" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116923.json b/data/2026/116xxx/CVE-2026-116923.json new file mode 100644 index 0000000000..54d1d72f27 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116923.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116923", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.544Z", + "datePublished": "2026-11-10T18:24:20.447Z", + "dateUpdated": "2026-11-10T18:24:20.447Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:20.447Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116923" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116925.json b/data/2026/116xxx/CVE-2026-116925.json new file mode 100644 index 0000000000..011b8ea43d --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116925.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116925", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.544Z", + "datePublished": "2026-11-10T18:22:03.734Z", + "dateUpdated": "2026-11-10T18:22:03.734Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:03.734Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116925" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116926.json b/data/2026/116xxx/CVE-2026-116926.json new file mode 100644 index 0000000000..d0bfb94a49 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116926.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116926", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:21.050Z", + "dateUpdated": "2026-11-10T18:24:21.050Z" + }, + "containers": { + "cna": { + "title": "Microsoft Teams Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1416/1.0.0.2026202302" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Teams for Android", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1416/1.0.0.2026202302", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:21.050Z" + }, + "references": [ + { + "name": "Microsoft Teams Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116926" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116927.json b/data/2026/116xxx/CVE-2026-116927.json new file mode 100644 index 0000000000..43bd944cf9 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116927.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116927", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:21.522Z", + "dateUpdated": "2026-11-10T18:24:21.522Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:21.522Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116927" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116928.json b/data/2026/116xxx/CVE-2026-116928.json new file mode 100644 index 0000000000..3b65082d4f --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116928.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116928", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:21:54.613Z", + "dateUpdated": "2026-11-10T18:21:54.613Z" + }, + "containers": { + "cna": { + "title": "Windows Search Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-787: Out-of-bounds Write", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-787" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:54.613Z" + }, + "references": [ + { + "name": "Windows Search Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116928" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116929.json b/data/2026/116xxx/CVE-2026-116929.json new file mode 100644 index 0000000000..1ea38a36ba --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116929.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116929", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:22.056Z", + "dateUpdated": "2026-11-10T18:24:22.056Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-250: Execution with Unnecessary Privileges", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-250" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:22.056Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116929" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116930.json b/data/2026/116xxx/CVE-2026-116930.json new file mode 100644 index 0000000000..ff8f365141 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116930.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116930", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:22.571Z", + "dateUpdated": "2026-11-10T18:24:22.571Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-77" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:22.571Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116930" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116931.json b/data/2026/116xxx/CVE-2026-116931.json new file mode 100644 index 0000000000..0a9ddacba0 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116931.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116931", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:23.159Z", + "dateUpdated": "2026-11-10T18:24:23.159Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:23.159Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116931" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116932.json b/data/2026/116xxx/CVE-2026-116932.json new file mode 100644 index 0000000000..5ff6397adc --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116932.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116932", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:23.749Z", + "dateUpdated": "2026-11-10T18:24:23.749Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:23.749Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116932" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116933.json b/data/2026/116xxx/CVE-2026-116933.json new file mode 100644 index 0000000000..0c6bf1d774 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116933.json @@ -0,0 +1,188 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116933", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:24.215Z", + "dateUpdated": "2026-11-10T18:24:24.215Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2025_for_x64-based_systems_\\(cu9\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.2", + "versionEndExcluding": "17.0.5015.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (CU9)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.2", + "lessThan": "17.0.5015.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:24.215Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116933" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116934.json b/data/2026/116xxx/CVE-2026-116934.json new file mode 100644 index 0000000000..3709e724fe --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116934.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116934", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:24.759Z", + "dateUpdated": "2026-11-10T18:24:24.759Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:24.759Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116934" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116935.json b/data/2026/116xxx/CVE-2026-116935.json new file mode 100644 index 0000000000..4ba314b24e --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116935.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116935", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:25.310Z", + "dateUpdated": "2026-11-10T18:24:25.310Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:25.310Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116935" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116936.json b/data/2026/116xxx/CVE-2026-116936.json new file mode 100644 index 0000000000..de8c5e4c35 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116936.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116936", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:25.821Z", + "dateUpdated": "2026-11-10T18:24:25.821Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:25.821Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116936" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116937.json b/data/2026/116xxx/CVE-2026-116937.json new file mode 100644 index 0000000000..733e618c87 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116937.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116937", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.545Z", + "datePublished": "2026-11-10T18:24:26.408Z", + "dateUpdated": "2026-11-10T18:24:26.408Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:26.408Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116937" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116938.json b/data/2026/116xxx/CVE-2026-116938.json new file mode 100644 index 0000000000..2d8df745b5 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116938.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116938", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.546Z", + "datePublished": "2026-11-10T18:24:27.012Z", + "dateUpdated": "2026-11-10T18:24:27.012Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:27.012Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116938" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116939.json b/data/2026/116xxx/CVE-2026-116939.json new file mode 100644 index 0000000000..0d1a05c33c --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116939.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116939", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.546Z", + "datePublished": "2026-11-10T18:24:27.610Z", + "dateUpdated": "2026-11-10T18:24:27.610Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:27.610Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116939" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.7, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116940.json b/data/2026/116xxx/CVE-2026-116940.json new file mode 100644 index 0000000000..85530ed8ec --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116940.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116940", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.546Z", + "datePublished": "2026-11-10T18:24:28.159Z", + "dateUpdated": "2026-11-10T18:24:28.159Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:28.159Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116940" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116941.json b/data/2026/116xxx/CVE-2026-116941.json new file mode 100644 index 0000000000..29e9bae740 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116941.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116941", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.546Z", + "datePublished": "2026-11-10T18:24:28.600Z", + "dateUpdated": "2026-11-10T18:24:28.600Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:28.600Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116941" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116942.json b/data/2026/116xxx/CVE-2026-116942.json new file mode 100644 index 0000000000..6043492a23 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116942.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116942", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.546Z", + "datePublished": "2026-11-10T18:24:29.184Z", + "dateUpdated": "2026-11-10T18:24:29.184Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:29.184Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116942" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116943.json b/data/2026/116xxx/CVE-2026-116943.json new file mode 100644 index 0000000000..546c0dc31b --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116943.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116943", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.546Z", + "datePublished": "2026-11-10T18:24:29.702Z", + "dateUpdated": "2026-11-10T18:24:29.702Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:29.702Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116943" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116944.json b/data/2026/116xxx/CVE-2026-116944.json new file mode 100644 index 0000000000..6b53f7c1c2 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116944.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116944", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.546Z", + "datePublished": "2026-11-10T18:24:30.299Z", + "dateUpdated": "2026-11-10T18:24:30.299Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:30.299Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116944" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116945.json b/data/2026/116xxx/CVE-2026-116945.json new file mode 100644 index 0000000000..16f025281b --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116945.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116945", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.547Z", + "datePublished": "2026-11-10T18:24:30.902Z", + "dateUpdated": "2026-11-10T18:24:30.902Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:30.902Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116945" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116946.json b/data/2026/116xxx/CVE-2026-116946.json new file mode 100644 index 0000000000..3642691be5 --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116946.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116946", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.547Z", + "datePublished": "2026-11-10T18:24:31.411Z", + "dateUpdated": "2026-11-10T18:24:31.411Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:31.411Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116946" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/116xxx/CVE-2026-116947.json b/data/2026/116xxx/CVE-2026-116947.json new file mode 100644 index 0000000000..322e0cb99c --- /dev/null +++ b/data/2026/116xxx/CVE-2026-116947.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-116947", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T02:25:21.547Z", + "datePublished": "2026-11-10T18:24:31.917Z", + "dateUpdated": "2026-11-10T18:24:31.917Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:31.917Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116947" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118102.json b/data/2026/118xxx/CVE-2026-118102.json new file mode 100644 index 0000000000..7144937e43 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118102.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118102", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.071Z", + "datePublished": "2026-11-10T18:24:32.443Z", + "dateUpdated": "2026-11-10T18:24:32.443Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of a broken or risky cryptographic algorithm in SQL Server allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-327" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:32.443Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118102" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118103.json b/data/2026/118xxx/CVE-2026-118103.json new file mode 100644 index 0000000000..ffd3e8bce4 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118103.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118103", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.072Z", + "datePublished": "2026-11-10T18:24:33.058Z", + "dateUpdated": "2026-11-10T18:24:33.058Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:33.058Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118103" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118104.json b/data/2026/118xxx/CVE-2026-118104.json new file mode 100644 index 0000000000..41e05581c1 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118104.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118104", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.072Z", + "datePublished": "2026-11-10T18:24:33.577Z", + "dateUpdated": "2026-11-10T18:24:33.577Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:33.577Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118104" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118105.json b/data/2026/118xxx/CVE-2026-118105.json new file mode 100644 index 0000000000..978f74b1ce --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118105.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118105", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.072Z", + "datePublished": "2026-11-10T18:24:34.113Z", + "dateUpdated": "2026-11-10T18:24:34.113Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:34.113Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118105" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118106.json b/data/2026/118xxx/CVE-2026-118106.json new file mode 100644 index 0000000000..f41cc694a3 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118106.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118106", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.072Z", + "datePublished": "2026-11-10T18:24:34.578Z", + "dateUpdated": "2026-11-10T18:24:34.578Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:34.578Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118106" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118108.json b/data/2026/118xxx/CVE-2026-118108.json new file mode 100644 index 0000000000..49c0fb163c --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118108.json @@ -0,0 +1,250 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118108", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.072Z", + "datePublished": "2026-11-10T18:24:35.103Z", + "dateUpdated": "2026-11-10T18:24:35.103Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Elevation of Privilege", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:35.103Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118108" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118109.json b/data/2026/118xxx/CVE-2026-118109.json new file mode 100644 index 0000000000..d644ef451a --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118109.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118109", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.072Z", + "datePublished": "2026-11-10T18:24:35.707Z", + "dateUpdated": "2026-11-10T18:24:35.707Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:35.707Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118109" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118110.json b/data/2026/118xxx/CVE-2026-118110.json new file mode 100644 index 0000000000..ca9fdc2311 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118110.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118110", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.072Z", + "datePublished": "2026-11-10T18:24:36.304Z", + "dateUpdated": "2026-11-10T18:24:36.304Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:36.304Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118110" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118111.json b/data/2026/118xxx/CVE-2026-118111.json new file mode 100644 index 0000000000..baaa4ef506 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118111.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118111", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.072Z", + "datePublished": "2026-11-10T18:24:36.756Z", + "dateUpdated": "2026-11-10T18:24:36.756Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-346: Origin Validation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-346" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:36.756Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118111" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118112.json b/data/2026/118xxx/CVE-2026-118112.json new file mode 100644 index 0000000000..123d436d95 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118112.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118112", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:37.257Z", + "dateUpdated": "2026-11-10T18:24:37.257Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:37.257Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118112" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118113.json b/data/2026/118xxx/CVE-2026-118113.json new file mode 100644 index 0000000000..2ad2c6c3a3 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118113.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118113", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:37.769Z", + "dateUpdated": "2026-11-10T18:24:37.769Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:37.769Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118113" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118114.json b/data/2026/118xxx/CVE-2026-118114.json new file mode 100644 index 0000000000..b5f6996daf --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118114.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118114", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:38.270Z", + "dateUpdated": "2026-11-10T18:24:38.270Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:38.270Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118114" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118115.json b/data/2026/118xxx/CVE-2026-118115.json new file mode 100644 index 0000000000..2fdf0e2f47 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118115.json @@ -0,0 +1,209 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118115", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:38.851Z", + "dateUpdated": "2026-11-10T18:24:38.851Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:38.851Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118115" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118116.json b/data/2026/118xxx/CVE-2026-118116.json new file mode 100644 index 0000000000..7c87bb549c --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118116.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118116", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:40.256Z", + "dateUpdated": "2026-11-10T18:24:40.256Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:40.256Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118116" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118117.json b/data/2026/118xxx/CVE-2026-118117.json new file mode 100644 index 0000000000..129b823f94 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118117.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118117", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:40.774Z", + "dateUpdated": "2026-11-10T18:24:40.774Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:40.774Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118117" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118118.json b/data/2026/118xxx/CVE-2026-118118.json new file mode 100644 index 0000000000..e7ecae75e5 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118118.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118118", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:41.361Z", + "dateUpdated": "2026-11-10T18:24:41.361Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:41.361Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118118" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118119.json b/data/2026/118xxx/CVE-2026-118119.json new file mode 100644 index 0000000000..cd14a75043 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118119.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118119", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:41.873Z", + "dateUpdated": "2026-11-10T18:24:41.873Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:41.873Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118119" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118120.json b/data/2026/118xxx/CVE-2026-118120.json new file mode 100644 index 0000000000..57d33119f6 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118120.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118120", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:24:42.371Z", + "dateUpdated": "2026-11-10T18:24:42.371Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-89" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:42.371Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118120" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118123.json b/data/2026/118xxx/CVE-2026-118123.json new file mode 100644 index 0000000000..f131e8e772 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118123.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118123", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.073Z", + "datePublished": "2026-11-10T18:20:15.549Z", + "dateUpdated": "2026-11-10T18:20:15.549Z" + }, + "containers": { + "cna": { + "title": "Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:15.549Z" + }, + "references": [ + { + "name": "Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118123" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118124.json b/data/2026/118xxx/CVE-2026-118124.json new file mode 100644 index 0000000000..b07b725711 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118124.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118124", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.074Z", + "datePublished": "2026-11-10T18:20:16.122Z", + "dateUpdated": "2026-11-10T18:20:16.122Z" + }, + "containers": { + "cna": { + "title": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:16.122Z" + }, + "references": [ + { + "name": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118124" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118125.json b/data/2026/118xxx/CVE-2026-118125.json new file mode 100644 index 0000000000..5ca8ef0c18 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118125.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118125", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.074Z", + "datePublished": "2026-11-10T18:20:16.668Z", + "dateUpdated": "2026-11-10T18:20:16.668Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:16.668Z" + }, + "references": [ + { + "name": "Windows Message Queuing Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118125" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118126.json b/data/2026/118xxx/CVE-2026-118126.json new file mode 100644 index 0000000000..f861fd4d9a --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118126.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118126", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T16:40:22.074Z", + "datePublished": "2026-11-10T18:20:17.208Z", + "dateUpdated": "2026-11-10T18:20:17.208Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:17.208Z" + }, + "references": [ + { + "name": "Windows Message Queuing Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118126" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118137.json b/data/2026/118xxx/CVE-2026-118137.json new file mode 100644 index 0000000000..ff6fc0f72f --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118137.json @@ -0,0 +1,449 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118137", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:17.799Z", + "dateUpdated": "2026-11-10T18:20:17.799Z" + }, + "containers": { + "cna": { + "title": "Windows FTP Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Elevation of Privilege", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:17.799Z" + }, + "references": [ + { + "name": "Windows FTP Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118137" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118138.json b/data/2026/118xxx/CVE-2026-118138.json new file mode 100644 index 0000000000..fe30d5947f --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118138.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118138", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:18.265Z", + "dateUpdated": "2026-11-10T18:20:18.265Z" + }, + "containers": { + "cna": { + "title": "Windows Client for NFS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Client for NFS allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:18.265Z" + }, + "references": [ + { + "name": "Windows Client for NFS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118138" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118140.json b/data/2026/118xxx/CVE-2026-118140.json new file mode 100644 index 0000000000..3daa6a8f1f --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118140.json @@ -0,0 +1,236 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118140", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:18.771Z", + "dateUpdated": "2026-11-10T18:20:18.771Z" + }, + "containers": { + "cna": { + "title": "Server for NFS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284: Improper Access Control", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-284" + }, + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:18.771Z" + }, + "references": [ + { + "name": "Server for NFS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118140" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118141.json b/data/2026/118xxx/CVE-2026-118141.json new file mode 100644 index 0000000000..1728edb6a0 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118141.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118141", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:19.257Z", + "dateUpdated": "2026-11-10T18:20:19.257Z" + }, + "containers": { + "cna": { + "title": "Windows Client for NFS Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:19.257Z" + }, + "references": [ + { + "name": "Windows Client for NFS Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118141" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118142.json b/data/2026/118xxx/CVE-2026-118142.json new file mode 100644 index 0000000000..3f09589d80 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118142.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118142", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:19.693Z", + "dateUpdated": "2026-11-10T18:20:19.693Z" + }, + "containers": { + "cna": { + "title": "Windows Distributed File System (DFS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:19.693Z" + }, + "references": [ + { + "name": "Windows Distributed File System (DFS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118142" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118143.json b/data/2026/118xxx/CVE-2026-118143.json new file mode 100644 index 0000000000..5fdad9cdc8 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118143.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118143", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:20.228Z", + "dateUpdated": "2026-11-10T18:20:20.228Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:20.228Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118143" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118144.json b/data/2026/118xxx/CVE-2026-118144.json new file mode 100644 index 0000000000..b322a914b5 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118144.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118144", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:20.733Z", + "dateUpdated": "2026-11-10T18:20:20.733Z" + }, + "containers": { + "cna": { + "title": "Windows Smart Card Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:20.733Z" + }, + "references": [ + { + "name": "Windows Smart Card Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118144" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118145.json b/data/2026/118xxx/CVE-2026-118145.json new file mode 100644 index 0000000000..878b061ffe --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118145.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118145", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:21.280Z", + "dateUpdated": "2026-11-10T18:20:21.280Z" + }, + "containers": { + "cna": { + "title": "Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:21.280Z" + }, + "references": [ + { + "name": "Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118145" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118146.json b/data/2026/118xxx/CVE-2026-118146.json new file mode 100644 index 0000000000..911c1b0009 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118146.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118146", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.727Z", + "datePublished": "2026-11-10T18:20:21.879Z", + "dateUpdated": "2026-11-10T18:20:21.879Z" + }, + "containers": { + "cna": { + "title": "Windows Active Directory Domain Services Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:21.879Z" + }, + "references": [ + { + "name": "Windows Active Directory Domain Services Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118146" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118148.json b/data/2026/118xxx/CVE-2026-118148.json new file mode 100644 index 0000000000..95510a4227 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118148.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118148", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.728Z", + "datePublished": "2026-11-10T18:24:43.000Z", + "dateUpdated": "2026-11-10T18:24:43.000Z" + }, + "containers": { + "cna": { + "title": "Active Directory Domain Services Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:43.000Z" + }, + "references": [ + { + "name": "Active Directory Domain Services Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118148" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118149.json b/data/2026/118xxx/CVE-2026-118149.json new file mode 100644 index 0000000000..4c8a8ba2b1 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118149.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118149", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.728Z", + "datePublished": "2026-11-10T18:21:45.740Z", + "dateUpdated": "2026-11-10T18:21:45.740Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:45.740Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118149" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118150.json b/data/2026/118xxx/CVE-2026-118150.json new file mode 100644 index 0000000000..b38af9a744 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118150.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118150", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.728Z", + "datePublished": "2026-11-10T18:21:46.259Z", + "dateUpdated": "2026-11-10T18:21:46.259Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639: Authorization Bypass Through User-Controlled Key", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-639" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:46.259Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118150" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118151.json b/data/2026/118xxx/CVE-2026-118151.json new file mode 100644 index 0000000000..92d00f9d54 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118151.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118151", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.728Z", + "datePublished": "2026-11-10T18:21:46.777Z", + "dateUpdated": "2026-11-10T18:21:46.777Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-73: External Control of File Name or Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-73" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:46.777Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118151" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118152.json b/data/2026/118xxx/CVE-2026-118152.json new file mode 100644 index 0000000000..201b16e8ee --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118152.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118152", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.728Z", + "datePublished": "2026-11-10T18:21:47.220Z", + "dateUpdated": "2026-11-10T18:21:47.220Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-352: Cross-Site Request Forgery (CSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-352" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:47.220Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118152" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118153.json b/data/2026/118xxx/CVE-2026-118153.json new file mode 100644 index 0000000000..63c2719cb0 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118153.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118153", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.728Z", + "datePublished": "2026-11-10T18:21:47.797Z", + "dateUpdated": "2026-11-10T18:21:47.797Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-407: Inefficient Algorithmic Complexity", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-407" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:47.797Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118153" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118154.json b/data/2026/118xxx/CVE-2026-118154.json new file mode 100644 index 0000000000..23010ad1e6 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118154.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118154", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.728Z", + "datePublished": "2026-11-10T18:21:48.312Z", + "dateUpdated": "2026-11-10T18:21:48.312Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-807: Reliance on Untrusted Inputs in a Security Decision", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-807" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:48.312Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118154" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118157.json b/data/2026/118xxx/CVE-2026-118157.json new file mode 100644 index 0000000000..a1dd8bf316 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118157.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118157", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T17:35:36.728Z", + "datePublished": "2026-11-10T18:21:48.749Z", + "dateUpdated": "2026-11-10T18:21:48.749Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:48.749Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118157" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.2, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118207.json b/data/2026/118xxx/CVE-2026-118207.json new file mode 100644 index 0000000000..c1cc784989 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118207.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118207", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.455Z", + "datePublished": "2026-11-10T18:21:49.272Z", + "dateUpdated": "2026-11-10T18:21:49.272Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-706: Use of Incorrectly-Resolved Name or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-706" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:49.272Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118207" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118208.json b/data/2026/118xxx/CVE-2026-118208.json new file mode 100644 index 0000000000..4b4522537c --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118208.json @@ -0,0 +1,103 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118208", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.455Z", + "datePublished": "2026-11-10T18:21:49.791Z", + "dateUpdated": "2026-11-10T18:21:49.791Z" + }, + "containers": { + "cna": { + "title": "Microsoft Exchange Server Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:exchange_server_se:*:RTM:*:*:*:*:*:*", + "versionStartIncluding": "15.02.0.0", + "versionEndExcluding": "15.02.2562.057" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Exchange Server Subscription Edition RTM", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.02.0.0", + "lessThan": "15.02.2562.057", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Spoofing", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:49.791Z" + }, + "references": [ + { + "name": "Microsoft Exchange Server Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118208" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118213.json b/data/2026/118xxx/CVE-2026-118213.json new file mode 100644 index 0000000000..41c6c47ae0 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118213.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118213", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.455Z", + "datePublished": "2026-11-10T18:20:22.493Z", + "dateUpdated": "2026-11-10T18:20:22.493Z" + }, + "containers": { + "cna": { + "title": "Windows Deployment Services Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-23: Relative Path Traversal", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-23" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:22.493Z" + }, + "references": [ + { + "name": "Windows Deployment Services Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118213" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118214.json b/data/2026/118xxx/CVE-2026-118214.json new file mode 100644 index 0000000000..6b347cf029 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118214.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118214", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.455Z", + "datePublished": "2026-11-10T18:20:23.092Z", + "dateUpdated": "2026-11-10T18:20:23.092Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Advanced Rasterization Platform allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:23.092Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118214" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118215.json b/data/2026/118xxx/CVE-2026-118215.json new file mode 100644 index 0000000000..aff045c92f --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118215.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118215", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:23.543Z", + "dateUpdated": "2026-11-10T18:20:23.543Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:23.543Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118215" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118216.json b/data/2026/118xxx/CVE-2026-118216.json new file mode 100644 index 0000000000..2db8171ce2 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118216.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118216", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:24.049Z", + "dateUpdated": "2026-11-10T18:20:24.049Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:24.049Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118216" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118217.json b/data/2026/118xxx/CVE-2026-118217.json new file mode 100644 index 0000000000..845a5768f6 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118217.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118217", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:24.564Z", + "dateUpdated": "2026-11-10T18:20:24.564Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:24.564Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118217" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118218.json b/data/2026/118xxx/CVE-2026-118218.json new file mode 100644 index 0000000000..9c7606ca6d --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118218.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118218", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:25.098Z", + "dateUpdated": "2026-11-10T18:20:25.098Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:25.098Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118218" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118219.json b/data/2026/118xxx/CVE-2026-118219.json new file mode 100644 index 0000000000..18deecbddf --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118219.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118219", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:27.219Z", + "dateUpdated": "2026-11-10T18:20:27.219Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:27.219Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118219" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118220.json b/data/2026/118xxx/CVE-2026-118220.json new file mode 100644 index 0000000000..a5ebcf4440 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118220.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118220", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:27.752Z", + "dateUpdated": "2026-11-10T18:20:27.752Z" + }, + "containers": { + "cna": { + "title": "Windows Multiple Provider Router Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:27.752Z" + }, + "references": [ + { + "name": "Windows Multiple Provider Router Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118220" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118221.json b/data/2026/118xxx/CVE-2026-118221.json new file mode 100644 index 0000000000..fb42962fa8 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118221.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118221", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:28.346Z", + "dateUpdated": "2026-11-10T18:20:28.346Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:28.346Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118221" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118222.json b/data/2026/118xxx/CVE-2026-118222.json new file mode 100644 index 0000000000..4a9d5d0f1f --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118222.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118222", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:28.867Z", + "dateUpdated": "2026-11-10T18:20:28.867Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:28.867Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118222" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118223.json b/data/2026/118xxx/CVE-2026-118223.json new file mode 100644 index 0000000000..38a485003a --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118223.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118223", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:29.448Z", + "dateUpdated": "2026-11-10T18:20:29.448Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:29.448Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118223" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118224.json b/data/2026/118xxx/CVE-2026-118224.json new file mode 100644 index 0000000000..2dfefb9f05 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118224.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118224", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:29.981Z", + "dateUpdated": "2026-11-10T18:20:29.981Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:29.981Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118224" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118225.json b/data/2026/118xxx/CVE-2026-118225.json new file mode 100644 index 0000000000..5cc05cf49e --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118225.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118225", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:30.514Z", + "dateUpdated": "2026-11-10T18:20:30.514Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inclusion of functionality from untrusted control sphere in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-829" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:30.514Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118225" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118226.json b/data/2026/118xxx/CVE-2026-118226.json new file mode 100644 index 0000000000..3020178ab3 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118226.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118226", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:30.965Z", + "dateUpdated": "2026-11-10T18:20:30.965Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:30.965Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118226" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118227.json b/data/2026/118xxx/CVE-2026-118227.json new file mode 100644 index 0000000000..c202b7606c --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118227.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118227", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.456Z", + "datePublished": "2026-11-10T18:20:31.575Z", + "dateUpdated": "2026-11-10T18:20:31.575Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:31.575Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118227" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118228.json b/data/2026/118xxx/CVE-2026-118228.json new file mode 100644 index 0000000000..fbeb7b1cb9 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118228.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118228", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.457Z", + "datePublished": "2026-11-10T18:20:32.119Z", + "dateUpdated": "2026-11-10T18:20:32.119Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:32.119Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118228" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118229.json b/data/2026/118xxx/CVE-2026-118229.json new file mode 100644 index 0000000000..dc93e2f111 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118229.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118229", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.457Z", + "datePublished": "2026-11-10T18:20:32.646Z", + "dateUpdated": "2026-11-10T18:20:32.646Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:32.646Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118229" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118232.json b/data/2026/118xxx/CVE-2026-118232.json new file mode 100644 index 0000000000..f9361605cc --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118232.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118232", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T19:10:04.457Z", + "datePublished": "2026-11-10T18:20:33.165Z", + "dateUpdated": "2026-11-10T18:20:33.165Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:33.165Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118232" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118277.json b/data/2026/118xxx/CVE-2026-118277.json new file mode 100644 index 0000000000..9a71c5cb0e --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118277.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118277", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.655Z", + "datePublished": "2026-11-10T18:20:33.610Z", + "dateUpdated": "2026-11-10T18:20:33.610Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:33.610Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118277" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118278.json b/data/2026/118xxx/CVE-2026-118278.json new file mode 100644 index 0000000000..a1dda10528 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118278.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118278", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.655Z", + "datePublished": "2026-11-10T18:20:34.120Z", + "dateUpdated": "2026-11-10T18:20:34.120Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:34.120Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118278" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118279.json b/data/2026/118xxx/CVE-2026-118279.json new file mode 100644 index 0000000000..bcab95ce60 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118279.json @@ -0,0 +1,392 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118279", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.655Z", + "datePublished": "2026-11-10T18:20:34.679Z", + "dateUpdated": "2026-11-10T18:20:34.679Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:34.679Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118279" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118280.json b/data/2026/118xxx/CVE-2026-118280.json new file mode 100644 index 0000000000..f1c0627367 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118280.json @@ -0,0 +1,392 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118280", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.655Z", + "datePublished": "2026-11-10T18:20:35.116Z", + "dateUpdated": "2026-11-10T18:20:35.116Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:35.116Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118280" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118283.json b/data/2026/118xxx/CVE-2026-118283.json new file mode 100644 index 0000000000..4d536727cf --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118283.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118283", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.655Z", + "datePublished": "2026-11-10T18:20:35.630Z", + "dateUpdated": "2026-11-10T18:20:35.630Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:35.630Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118283" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118288.json b/data/2026/118xxx/CVE-2026-118288.json new file mode 100644 index 0000000000..b004324c50 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118288.json @@ -0,0 +1,140 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118288", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.656Z", + "datePublished": "2026-11-10T18:24:14.589Z", + "dateUpdated": "2026-11-10T18:24:14.589Z" + }, + "containers": { + "cna": { + "title": "Microsoft Azure File Sync Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*", + "versionStartIncluding": "23.1.0.0", + "versionEndExcluding": "23.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_file_sync:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "23.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_file_sync_v22:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "23.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure File Sync", + "versions": [ + { + "version": "23.1.0.0", + "lessThan": "23.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Azure File Sync", + "versions": [ + { + "version": "1.0.0", + "lessThan": "23.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Azure File Sync v22", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "23.2", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-732: Incorrect Permission Assignment for Critical Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-732" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:14.589Z" + }, + "references": [ + { + "name": "Microsoft Azure File Sync Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118288" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118292.json b/data/2026/118xxx/CVE-2026-118292.json new file mode 100644 index 0000000000..bb1ad71fde --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118292.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118292", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.656Z", + "datePublished": "2026-11-10T18:24:43.606Z", + "dateUpdated": "2026-11-10T18:24:43.606Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:43.606Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118292" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118293.json b/data/2026/118xxx/CVE-2026-118293.json new file mode 100644 index 0000000000..79d407e067 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118293.json @@ -0,0 +1,227 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118293", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.656Z", + "datePublished": "2026-11-10T18:24:44.148Z", + "dateUpdated": "2026-11-10T18:24:44.148Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + }, + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:44.148Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118293" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118294.json b/data/2026/118xxx/CVE-2026-118294.json new file mode 100644 index 0000000000..977ec1e22c --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118294.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118294", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.656Z", + "datePublished": "2026-11-10T18:24:44.743Z", + "dateUpdated": "2026-11-10T18:24:44.743Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:44.743Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118294" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118295.json b/data/2026/118xxx/CVE-2026-118295.json new file mode 100644 index 0000000000..0d95af16b8 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118295.json @@ -0,0 +1,227 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118295", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.656Z", + "datePublished": "2026-11-10T18:24:45.283Z", + "dateUpdated": "2026-11-10T18:24:45.283Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:45.283Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118295" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118296.json b/data/2026/118xxx/CVE-2026-118296.json new file mode 100644 index 0000000000..f763f26b16 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118296.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118296", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.656Z", + "datePublished": "2026-11-10T18:24:45.874Z", + "dateUpdated": "2026-11-10T18:24:45.874Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:45.874Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118296" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118297.json b/data/2026/118xxx/CVE-2026-118297.json new file mode 100644 index 0000000000..d12777cd81 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118297.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118297", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.656Z", + "datePublished": "2026-11-10T18:24:46.389Z", + "dateUpdated": "2026-11-10T18:24:46.389Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:46.389Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118297" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118298.json b/data/2026/118xxx/CVE-2026-118298.json new file mode 100644 index 0000000000..ab6b61f16b --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118298.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118298", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.656Z", + "datePublished": "2026-11-10T18:24:46.960Z", + "dateUpdated": "2026-11-10T18:24:46.960Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:46.960Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118298" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118299.json b/data/2026/118xxx/CVE-2026-118299.json new file mode 100644 index 0000000000..14bb3fb4d6 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118299.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118299", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.657Z", + "datePublished": "2026-11-10T18:24:47.539Z", + "dateUpdated": "2026-11-10T18:24:47.539Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:47.539Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118299" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118300.json b/data/2026/118xxx/CVE-2026-118300.json new file mode 100644 index 0000000000..94bdfeb396 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118300.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118300", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.657Z", + "datePublished": "2026-11-10T18:24:47.990Z", + "dateUpdated": "2026-11-10T18:24:47.990Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:47.990Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118300" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118301.json b/data/2026/118xxx/CVE-2026-118301.json new file mode 100644 index 0000000000..a65db25e12 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118301.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118301", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.657Z", + "datePublished": "2026-11-10T18:24:48.517Z", + "dateUpdated": "2026-11-10T18:24:48.517Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:48.517Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118301" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118302.json b/data/2026/118xxx/CVE-2026-118302.json new file mode 100644 index 0000000000..478285cd3a --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118302.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118302", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-27T21:05:24.657Z", + "datePublished": "2026-11-10T18:24:49.028Z", + "dateUpdated": "2026-11-10T18:24:49.028Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:49.028Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118302" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118700.json b/data/2026/118xxx/CVE-2026-118700.json new file mode 100644 index 0000000000..b5944faa58 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118700.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118700", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.603Z", + "datePublished": "2026-11-10T18:24:49.541Z", + "dateUpdated": "2026-11-10T18:24:49.541Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:49.541Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118700" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118701.json b/data/2026/118xxx/CVE-2026-118701.json new file mode 100644 index 0000000000..3bba2f67d5 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118701.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118701", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:49.993Z", + "dateUpdated": "2026-11-10T18:24:49.993Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:49.993Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118701" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118702.json b/data/2026/118xxx/CVE-2026-118702.json new file mode 100644 index 0000000000..e1c23044bd --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118702.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118702", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:50.522Z", + "dateUpdated": "2026-11-10T18:24:50.522Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:50.522Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118702" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118703.json b/data/2026/118xxx/CVE-2026-118703.json new file mode 100644 index 0000000000..a7660e455d --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118703.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118703", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:50.975Z", + "dateUpdated": "2026-11-10T18:24:50.975Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:50.975Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118703" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118704.json b/data/2026/118xxx/CVE-2026-118704.json new file mode 100644 index 0000000000..c9573298bb --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118704.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118704", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:51.485Z", + "dateUpdated": "2026-11-10T18:24:51.485Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:51.485Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118704" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118705.json b/data/2026/118xxx/CVE-2026-118705.json new file mode 100644 index 0000000000..c39046551c --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118705.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118705", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:51.940Z", + "dateUpdated": "2026-11-10T18:24:51.940Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:51.940Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118705" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118706.json b/data/2026/118xxx/CVE-2026-118706.json new file mode 100644 index 0000000000..d5fbdc0462 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118706.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118706", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:52.374Z", + "dateUpdated": "2026-11-10T18:24:52.374Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:52.374Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118706" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118707.json b/data/2026/118xxx/CVE-2026-118707.json new file mode 100644 index 0000000000..6222a3117e --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118707.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118707", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:52.883Z", + "dateUpdated": "2026-11-10T18:24:52.883Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:52.883Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118707" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118708.json b/data/2026/118xxx/CVE-2026-118708.json new file mode 100644 index 0000000000..66ac7c4365 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118708.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118708", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:53.315Z", + "dateUpdated": "2026-11-10T18:24:53.315Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:53.315Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118708" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118709.json b/data/2026/118xxx/CVE-2026-118709.json new file mode 100644 index 0000000000..82923f81f5 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118709.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118709", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:53.773Z", + "dateUpdated": "2026-11-10T18:24:53.773Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:53.773Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118709" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118710.json b/data/2026/118xxx/CVE-2026-118710.json new file mode 100644 index 0000000000..4f122ae90b --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118710.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118710", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:54.284Z", + "dateUpdated": "2026-11-10T18:24:54.284Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:54.284Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118710" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118711.json b/data/2026/118xxx/CVE-2026-118711.json new file mode 100644 index 0000000000..1ae9aab820 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118711.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118711", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:54.798Z", + "dateUpdated": "2026-11-10T18:24:54.798Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:54.798Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118711" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118712.json b/data/2026/118xxx/CVE-2026-118712.json new file mode 100644 index 0000000000..b9159aff30 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118712.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118712", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.604Z", + "datePublished": "2026-11-10T18:24:55.312Z", + "dateUpdated": "2026-11-10T18:24:55.312Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:55.312Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118712" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118713.json b/data/2026/118xxx/CVE-2026-118713.json new file mode 100644 index 0000000000..5a9789a47d --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118713.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118713", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:55.759Z", + "dateUpdated": "2026-11-10T18:24:55.759Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:55.759Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118713" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118714.json b/data/2026/118xxx/CVE-2026-118714.json new file mode 100644 index 0000000000..361afb3ca1 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118714.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118714", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:56.346Z", + "dateUpdated": "2026-11-10T18:24:56.346Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:56.346Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118714" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118715.json b/data/2026/118xxx/CVE-2026-118715.json new file mode 100644 index 0000000000..4b62f7bf4c --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118715.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118715", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:56.866Z", + "dateUpdated": "2026-11-10T18:24:56.866Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:56.866Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118715" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118716.json b/data/2026/118xxx/CVE-2026-118716.json new file mode 100644 index 0000000000..b02f6690aa --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118716.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118716", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:57.452Z", + "dateUpdated": "2026-11-10T18:24:57.452Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:57.452Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118716" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118717.json b/data/2026/118xxx/CVE-2026-118717.json new file mode 100644 index 0000000000..f390fdd06c --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118717.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118717", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:57.976Z", + "dateUpdated": "2026-11-10T18:24:57.976Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:57.976Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118717" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118718.json b/data/2026/118xxx/CVE-2026-118718.json new file mode 100644 index 0000000000..7ffd432c10 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118718.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118718", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:58.509Z", + "dateUpdated": "2026-11-10T18:24:58.509Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:58.509Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118718" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118719.json b/data/2026/118xxx/CVE-2026-118719.json new file mode 100644 index 0000000000..77d4ce86dd --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118719.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118719", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:59.041Z", + "dateUpdated": "2026-11-10T18:24:59.041Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:59.041Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118719" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118720.json b/data/2026/118xxx/CVE-2026-118720.json new file mode 100644 index 0000000000..3bc1f30649 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118720.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118720", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:59.554Z", + "dateUpdated": "2026-11-10T18:24:59.554Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:59.554Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118720" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118721.json b/data/2026/118xxx/CVE-2026-118721.json new file mode 100644 index 0000000000..8ab785e471 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118721.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118721", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:24:59.990Z", + "dateUpdated": "2026-11-10T18:24:59.990Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:59.990Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118721" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118722.json b/data/2026/118xxx/CVE-2026-118722.json new file mode 100644 index 0000000000..f5da889fcd --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118722.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118722", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:25:00.573Z", + "dateUpdated": "2026-11-10T18:25:00.573Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:00.573Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118722" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118723.json b/data/2026/118xxx/CVE-2026-118723.json new file mode 100644 index 0000000000..ffb49321ba --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118723.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118723", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:25:01.094Z", + "dateUpdated": "2026-11-10T18:25:01.094Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:01.094Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118723" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118724.json b/data/2026/118xxx/CVE-2026-118724.json new file mode 100644 index 0000000000..1e984cf9e6 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118724.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118724", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:25:01.680Z", + "dateUpdated": "2026-11-10T18:25:01.680Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:01.680Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118724" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118725.json b/data/2026/118xxx/CVE-2026-118725.json new file mode 100644 index 0000000000..077c9c1227 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118725.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118725", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:02:36.605Z", + "datePublished": "2026-11-10T18:25:02.259Z", + "dateUpdated": "2026-11-10T18:25:02.259Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:02.259Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118725" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118726.json b/data/2026/118xxx/CVE-2026-118726.json new file mode 100644 index 0000000000..b6aefe5a71 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118726.json @@ -0,0 +1,227 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118726", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.386Z", + "datePublished": "2026-11-10T18:25:02.796Z", + "dateUpdated": "2026-11-10T18:25:02.796Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-193: Off-by-one Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-193" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:02.796Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118726" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118727.json b/data/2026/118xxx/CVE-2026-118727.json new file mode 100644 index 0000000000..11a1a89178 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118727.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118727", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.386Z", + "datePublished": "2026-11-10T18:25:03.390Z", + "dateUpdated": "2026-11-10T18:25:03.390Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:03.390Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118727" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118728.json b/data/2026/118xxx/CVE-2026-118728.json new file mode 100644 index 0000000000..fc301002b2 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118728.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118728", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.386Z", + "datePublished": "2026-11-10T18:25:03.932Z", + "dateUpdated": "2026-11-10T18:25:03.932Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:03.932Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118728" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118729.json b/data/2026/118xxx/CVE-2026-118729.json new file mode 100644 index 0000000000..96efe35119 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118729.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118729", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.386Z", + "datePublished": "2026-11-10T18:25:04.525Z", + "dateUpdated": "2026-11-10T18:25:04.525Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:04.525Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118729" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118730.json b/data/2026/118xxx/CVE-2026-118730.json new file mode 100644 index 0000000000..cc72f5e32a --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118730.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118730", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.386Z", + "datePublished": "2026-11-10T18:25:05.048Z", + "dateUpdated": "2026-11-10T18:25:05.048Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:05.048Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118730" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118731.json b/data/2026/118xxx/CVE-2026-118731.json new file mode 100644 index 0000000000..36d841c162 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118731.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118731", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.386Z", + "datePublished": "2026-11-10T18:25:05.592Z", + "dateUpdated": "2026-11-10T18:25:05.592Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:05.592Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118731" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118732.json b/data/2026/118xxx/CVE-2026-118732.json new file mode 100644 index 0000000000..fd75333d01 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118732.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118732", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.386Z", + "datePublished": "2026-11-10T18:25:06.123Z", + "dateUpdated": "2026-11-10T18:25:06.123Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:06.123Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118732" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118735.json b/data/2026/118xxx/CVE-2026-118735.json new file mode 100644 index 0000000000..e145d665d7 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118735.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118735", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.387Z", + "datePublished": "2026-11-10T18:20:36.153Z", + "dateUpdated": "2026-11-10T18:20:36.153Z" + }, + "containers": { + "cna": { + "title": "Active Directory Domain Services Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:36.153Z" + }, + "references": [ + { + "name": "Active Directory Domain Services Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118735" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118736.json b/data/2026/118xxx/CVE-2026-118736.json new file mode 100644 index 0000000000..4e249acc8e --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118736.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118736", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.387Z", + "datePublished": "2026-11-10T18:20:36.659Z", + "dateUpdated": "2026-11-10T18:20:36.659Z" + }, + "containers": { + "cna": { + "title": "Windows Network File System Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284: Improper Access Control", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-284" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:36.659Z" + }, + "references": [ + { + "name": "Windows Network File System Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118736" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118737.json b/data/2026/118xxx/CVE-2026-118737.json new file mode 100644 index 0000000000..5ae50a1b29 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118737.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118737", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.387Z", + "datePublished": "2026-11-10T18:20:37.177Z", + "dateUpdated": "2026-11-10T18:20:37.177Z" + }, + "containers": { + "cna": { + "title": "Remote Procedure Call Runtime Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-347: Improper Verification of Cryptographic Signature", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-347" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:37.177Z" + }, + "references": [ + { + "name": "Remote Procedure Call Runtime Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118737" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118739.json b/data/2026/118xxx/CVE-2026-118739.json new file mode 100644 index 0000000000..5f0f14cfd9 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118739.json @@ -0,0 +1,191 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118739", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.387Z", + "datePublished": "2026-11-10T18:21:50.233Z", + "dateUpdated": "2026-11-10T18:21:50.233Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Client Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9168" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9168" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33296" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33296" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.2704" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9168", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9168", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.2704", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33296", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33296", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:50.233Z" + }, + "references": [ + { + "name": "Windows DHCP Client Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118739" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118740.json b/data/2026/118xxx/CVE-2026-118740.json new file mode 100644 index 0000000000..fed6e82bd9 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118740.json @@ -0,0 +1,122 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118740", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.387Z", + "datePublished": "2026-11-10T18:24:15.124Z", + "dateUpdated": "2026-11-10T18:24:15.124Z" + }, + "containers": { + "cna": { + "title": "Aspire Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:aspire_dashboard:*:*:*:*:*:*:*:*", + "versionStartIncluding": "13.6.1", + "versionEndExcluding": "13.6.5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:aspire.dashboard.sdk.linux-x64:*:*:*:*:*:*:*:*", + "versionStartIncluding": "13.6.1", + "versionEndExcluding": "13.6.5" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Aspire Dashboard", + "versions": [ + { + "version": "13.6.1", + "lessThan": "13.6.5", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Aspire.Dashboard.Sdk.linux-x64", + "platforms": [ + "Linux" + ], + "versions": [ + { + "version": "13.6.1", + "lessThan": "13.6.5", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:15.124Z" + }, + "references": [ + { + "name": "Aspire Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118740" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118741.json b/data/2026/118xxx/CVE-2026-118741.json new file mode 100644 index 0000000000..4773660734 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118741.json @@ -0,0 +1,219 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118741", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.387Z", + "datePublished": "2026-11-10T18:24:15.572Z", + "dateUpdated": "2026-11-10T18:24:15.572Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.visualstudio.web.codegenerators.mvc:*:*:*:*:*:*:*:*", + "versionStartIncluding": "NOT_YET_AVAILABLE", + "versionEndExcluding": "10.0.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.visualstudio.web.codegeneration.design:*:*:*:*:*:*:*:*", + "versionStartIncluding": "NOT_YET_AVAILABLE", + "versionEndExcluding": "10.0.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.dotnet-scaffold-aspnet:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.dotnet-scaffold:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "20.3.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.dotnet.web.projecttemplates.8.0:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.32", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.dotnet.web.projecttemplates.9.0:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.21", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.dotnet.web.projecttemplates.10.0:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.13", + "versionEndExcluding": "10.0.15" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft.dotnet-scaffold", + "versions": [ + { + "version": "10.0.0", + "lessThan": "20.3.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.dotnet-scaffold-aspnet", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.13", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.DotNet.Web.ProjectTemplates.10.0", + "versions": [ + { + "version": "10.0.13", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.DotNet.Web.ProjectTemplates.8.0", + "versions": [ + { + "version": "8.0.32", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.DotNet.Web.ProjectTemplates.9.0", + "versions": [ + { + "version": "9.0.21", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.VisualStudio.Web.CodeGeneration.Design", + "platforms": [ + ".NET 10.0", + ".NET 8.0", + ".NET 9.0" + ], + "versions": [ + { + "version": "NOT_YET_AVAILABLE", + "lessThan": "10.0.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.VisualStudio.Web.CodeGenerators.Mvc", + "platforms": [ + ".NET 10.0", + ".NET 8.0", + ".NET 9.0" + ], + "versions": [ + { + "version": "NOT_YET_AVAILABLE", + "lessThan": "10.0.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-640: Weak Password Recovery Mechanism for Forgotten Password", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-640" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:15.572Z" + }, + "references": [ + { + "name": "ASP.NET Core Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118741" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118742.json b/data/2026/118xxx/CVE-2026-118742.json new file mode 100644 index 0000000000..35b0b4975b --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118742.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118742", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.387Z", + "datePublished": "2026-11-10T18:20:37.698Z", + "dateUpdated": "2026-11-10T18:20:37.698Z" + }, + "containers": { + "cna": { + "title": "Azure Front Door Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_front_door:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "publication" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Front Door", + "versions": [ + { + "version": "1.0.0", + "lessThan": "publication", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-732: Incorrect Permission Assignment for Critical Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-732" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:37.698Z" + }, + "references": [ + { + "name": "Azure Front Door Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118742" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.6, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118745.json b/data/2026/118xxx/CVE-2026-118745.json new file mode 100644 index 0000000000..919c7560a1 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118745.json @@ -0,0 +1,191 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118745", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.388Z", + "datePublished": "2026-11-10T18:21:51.212Z", + "dateUpdated": "2026-11-10T18:21:51.212Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "8.0.0", + "versionEndExcluding": "8.0.34" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.0.0", + "versionEndExcluding": "9.0.23" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "10.0.15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.11.0", + "versionEndExcluding": "18.11.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 10.0 installed on Windows", + "versions": [ + { + "version": "10.0.0", + "lessThan": "10.0.15", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 8.0 installed on Windows", + "versions": [ + { + "version": "8.0.0", + "lessThan": "8.0.34", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 9.0 installed on Windows", + "versions": [ + { + "version": "9.0.0", + "lessThan": "9.0.23", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.11", + "versions": [ + { + "version": "18.11.0", + "lessThan": "18.11.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:51.212Z" + }, + "references": [ + { + "name": "Visual Studio Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118745" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118746.json b/data/2026/118xxx/CVE-2026-118746.json new file mode 100644 index 0000000000..f48cb09f92 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118746.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118746", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.388Z", + "datePublished": "2026-11-10T18:21:51.731Z", + "dateUpdated": "2026-11-10T18:21:51.731Z" + }, + "containers": { + "cna": { + "title": ".NET Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-636: Not Failing Securely ('Failing Open')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-636" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:51.731Z" + }, + "references": [ + { + "name": ".NET Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118746" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118747.json b/data/2026/118xxx/CVE-2026-118747.json new file mode 100644 index 0000000000..975e432760 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118747.json @@ -0,0 +1,106 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118747", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.388Z", + "datePublished": "2026-11-10T18:21:52.172Z", + "dateUpdated": "2026-11-10T18:21:52.172Z" + }, + "containers": { + "cna": { + "title": ".NET Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:system.formats.cbor:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.0", + "versionEndExcluding": "11.0.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "System.Formats.Cbor", + "platforms": [ + ".NET 10.0", + ".NET 11.0", + ".NET 8.0" + ], + "versions": [ + { + "version": "10.0.0", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-407: Inefficient Algorithmic Complexity", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-407" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:52.172Z" + }, + "references": [ + { + "name": ".NET Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118747" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118748.json b/data/2026/118xxx/CVE-2026-118748.json new file mode 100644 index 0000000000..05372b76dd --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118748.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118748", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.388Z", + "datePublished": "2026-11-10T18:21:52.687Z", + "dateUpdated": "2026-11-10T18:21:52.687Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-770: Allocation of Resources Without Limits or Throttling", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-770" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:52.687Z" + }, + "references": [ + { + "name": "ASP.NET Core Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118748" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118749.json b/data/2026/118xxx/CVE-2026-118749.json new file mode 100644 index 0000000000..97814417ea --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118749.json @@ -0,0 +1,173 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118749", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.388Z", + "datePublished": "2026-11-10T18:21:53.138Z", + "dateUpdated": "2026-11-10T18:21:53.138Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.extensions.validation:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-rc.1.26425.128", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*", + "versionStartIncluding": "18.12.0", + "versionEndExcluding": "18.12.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Visual Studio 2026 version 18.12", + "versions": [ + { + "version": "18.12.0", + "lessThan": "18.12.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.Extensions.Validation", + "versions": [ + { + "version": "11.0.0-rc.1.26425.128", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-407: Inefficient Algorithmic Complexity", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-407" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:53.138Z" + }, + "references": [ + { + "name": "ASP.NET Core Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118749" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/118xxx/CVE-2026-118750.json b/data/2026/118xxx/CVE-2026-118750.json new file mode 100644 index 0000000000..0eb5c79003 --- /dev/null +++ b/data/2026/118xxx/CVE-2026-118750.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-118750", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-28T19:08:23.388Z", + "datePublished": "2026-11-10T18:21:53.594Z", + "dateUpdated": "2026-11-10T18:21:53.594Z" + }, + "containers": { + "cna": { + "title": "ASP.NET Core Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft.aspnetcore.webutilities:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.3.12", + "versionEndExcluding": "2.3.14" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft.AspNetCore.WebUtilities", + "versions": [ + { + "version": "2.3.12", + "lessThan": "2.3.14", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-770: Allocation of Resources Without Limits or Throttling", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-770" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:53.594Z" + }, + "references": [ + { + "name": "ASP.NET Core Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118750" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119382.json b/data/2026/119xxx/CVE-2026-119382.json new file mode 100644 index 0000000000..a8735ca799 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119382.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119382", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:24:16.231Z", + "dateUpdated": "2026-11-10T18:24:16.231Z" + }, + "containers": { + "cna": { + "title": "Windows TPM Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:16.231Z" + }, + "references": [ + { + "name": "Windows TPM Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119382" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119383.json b/data/2026/119xxx/CVE-2026-119383.json new file mode 100644 index 0000000000..e5d1a039de --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119383.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119383", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:25.793Z", + "dateUpdated": "2026-11-10T18:22:25.793Z" + }, + "containers": { + "cna": { + "title": "Windows Smart Card Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:25.793Z" + }, + "references": [ + { + "name": "Windows Smart Card Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119383" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119385.json b/data/2026/119xxx/CVE-2026-119385.json new file mode 100644 index 0000000000..3d4bd7652f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119385.json @@ -0,0 +1,452 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119385", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:26.377Z", + "dateUpdated": "2026-11-10T18:22:26.377Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:26.377Z" + }, + "references": [ + { + "name": "Windows Hyper-V Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119385" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119386.json b/data/2026/119xxx/CVE-2026-119386.json new file mode 100644 index 0000000000..a2fda4bd56 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119386.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119386", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:26.990Z", + "dateUpdated": "2026-11-10T18:22:26.990Z" + }, + "containers": { + "cna": { + "title": "Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:26.990Z" + }, + "references": [ + { + "name": "Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119386" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119387.json b/data/2026/119xxx/CVE-2026-119387.json new file mode 100644 index 0000000000..3f8018d154 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119387.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119387", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:27.542Z", + "dateUpdated": "2026-11-10T18:22:27.542Z" + }, + "containers": { + "cna": { + "title": "Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:27.542Z" + }, + "references": [ + { + "name": "Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119387" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119388.json b/data/2026/119xxx/CVE-2026-119388.json new file mode 100644 index 0000000000..c755ca19e7 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119388.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119388", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:28.013Z", + "dateUpdated": "2026-11-10T18:22:28.013Z" + }, + "containers": { + "cna": { + "title": "Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:28.013Z" + }, + "references": [ + { + "name": "Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119388" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119389.json b/data/2026/119xxx/CVE-2026-119389.json new file mode 100644 index 0000000000..d64daeb0c2 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119389.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119389", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:28.524Z", + "dateUpdated": "2026-11-10T18:22:28.524Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:28.524Z" + }, + "references": [ + { + "name": "Windows Storage Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119389" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119390.json b/data/2026/119xxx/CVE-2026-119390.json new file mode 100644 index 0000000000..471d76e453 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119390.json @@ -0,0 +1,468 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119390", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:29.072Z", + "dateUpdated": "2026-11-10T18:22:29.072Z" + }, + "containers": { + "cna": { + "title": "Remote Desktop Client Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_app_client_for_windows_desktop:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "1.00", + "versionEndExcluding": "2.0.1489.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows App Client for Windows Desktop", + "versions": [ + { + "version": "1.00", + "lessThan": "2.0.1489.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:29.072Z" + }, + "references": [ + { + "name": "Remote Desktop Client Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119390" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119391.json b/data/2026/119xxx/CVE-2026-119391.json new file mode 100644 index 0000000000..e36522ef4f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119391.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119391", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:29.691Z", + "dateUpdated": "2026-11-10T18:22:29.691Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:29.691Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119391" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119392.json b/data/2026/119xxx/CVE-2026-119392.json new file mode 100644 index 0000000000..252b331a6a --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119392.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119392", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.521Z", + "datePublished": "2026-11-10T18:22:30.346Z", + "dateUpdated": "2026-11-10T18:22:30.346Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:30.346Z" + }, + "references": [ + { + "name": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119392" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119393.json b/data/2026/119xxx/CVE-2026-119393.json new file mode 100644 index 0000000000..60fa24d919 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119393.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119393", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:30.836Z", + "dateUpdated": "2026-11-10T18:22:30.836Z" + }, + "containers": { + "cna": { + "title": "Windows Credential Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:30.836Z" + }, + "references": [ + { + "name": "Windows Credential Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119393" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119394.json b/data/2026/119xxx/CVE-2026-119394.json new file mode 100644 index 0000000000..69124fc804 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119394.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119394", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:31.429Z", + "dateUpdated": "2026-11-10T18:22:31.429Z" + }, + "containers": { + "cna": { + "title": "Windows Enhanced Storage Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:31.429Z" + }, + "references": [ + { + "name": "Windows Enhanced Storage Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119394" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119395.json b/data/2026/119xxx/CVE-2026-119395.json new file mode 100644 index 0000000000..124ea16172 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119395.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119395", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:32.023Z", + "dateUpdated": "2026-11-10T18:22:32.023Z" + }, + "containers": { + "cna": { + "title": "Storport.sys Driver Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Storport.sys Driver allows an authorized attacker to disclose information with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:32.023Z" + }, + "references": [ + { + "name": "Storport.sys Driver Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119395" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4, + "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119396.json b/data/2026/119xxx/CVE-2026-119396.json new file mode 100644 index 0000000000..e6843b2ede --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119396.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119396", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:32.497Z", + "dateUpdated": "2026-11-10T18:22:32.497Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Access API Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:32.497Z" + }, + "references": [ + { + "name": "Windows Remote Access API Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119396" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119397.json b/data/2026/119xxx/CVE-2026-119397.json new file mode 100644 index 0000000000..f8e4bcf1d1 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119397.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119397", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:33.017Z", + "dateUpdated": "2026-11-10T18:22:33.017Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Transaction Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:33.017Z" + }, + "references": [ + { + "name": "Windows Kernel Transaction Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119397" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119398.json b/data/2026/119xxx/CVE-2026-119398.json new file mode 100644 index 0000000000..ee08ddcd42 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119398.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119398", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:33.537Z", + "dateUpdated": "2026-11-10T18:22:33.537Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:33.537Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119398" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119399.json b/data/2026/119xxx/CVE-2026-119399.json new file mode 100644 index 0000000000..00b51e53fa --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119399.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119399", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:34.074Z", + "dateUpdated": "2026-11-10T18:22:34.074Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + }, + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:34.074Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119399" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119401.json b/data/2026/119xxx/CVE-2026-119401.json new file mode 100644 index 0000000000..2ac1f3106f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119401.json @@ -0,0 +1,281 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119401", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:34.554Z", + "dateUpdated": "2026-11-10T18:22:34.554Z" + }, + "containers": { + "cna": { + "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:34.554Z" + }, + "references": [ + { + "name": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119401" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119402.json b/data/2026/119xxx/CVE-2026-119402.json new file mode 100644 index 0000000000..0d621b9fce --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119402.json @@ -0,0 +1,281 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119402", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:34.995Z", + "dateUpdated": "2026-11-10T18:22:34.995Z" + }, + "containers": { + "cna": { + "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:34.995Z" + }, + "references": [ + { + "name": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119402" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119403.json b/data/2026/119xxx/CVE-2026-119403.json new file mode 100644 index 0000000000..f8c2e2680e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119403.json @@ -0,0 +1,281 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119403", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:35.523Z", + "dateUpdated": "2026-11-10T18:22:35.523Z" + }, + "containers": { + "cna": { + "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:35.523Z" + }, + "references": [ + { + "name": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119403" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119404.json b/data/2026/119xxx/CVE-2026-119404.json new file mode 100644 index 0000000000..74db08aae6 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119404.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119404", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:36.028Z", + "dateUpdated": "2026-11-10T18:22:36.028Z" + }, + "containers": { + "cna": { + "title": "Windows Client for NFS Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Client for NFS allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284: Improper Access Control", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-284" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:36.028Z" + }, + "references": [ + { + "name": "Windows Client for NFS Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119404" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119405.json b/data/2026/119xxx/CVE-2026-119405.json new file mode 100644 index 0000000000..456e52a1d2 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119405.json @@ -0,0 +1,259 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119405", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T01:21:51.522Z", + "datePublished": "2026-11-10T18:22:36.610Z", + "dateUpdated": "2026-11-10T18:22:36.610Z" + }, + "containers": { + "cna": { + "title": "Windows Backup Engine Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:36.610Z" + }, + "references": [ + { + "name": "Windows Backup Engine Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119405" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119816.json b/data/2026/119xxx/CVE-2026-119816.json new file mode 100644 index 0000000000..c8e5bf596b --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119816.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119816", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.748Z", + "datePublished": "2026-11-10T18:22:37.121Z", + "dateUpdated": "2026-11-10T18:22:37.121Z" + }, + "containers": { + "cna": { + "title": "Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:37.121Z" + }, + "references": [ + { + "name": "Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119816" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119817.json b/data/2026/119xxx/CVE-2026-119817.json new file mode 100644 index 0000000000..12ad509d53 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119817.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119817", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.748Z", + "datePublished": "2026-11-10T18:22:37.712Z", + "dateUpdated": "2026-11-10T18:22:37.712Z" + }, + "containers": { + "cna": { + "title": "Windows Shell Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Shell allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:37.712Z" + }, + "references": [ + { + "name": "Windows Shell Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119817" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119818.json b/data/2026/119xxx/CVE-2026-119818.json new file mode 100644 index 0000000000..d2992b71d9 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119818.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119818", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.748Z", + "datePublished": "2026-11-10T18:22:38.289Z", + "dateUpdated": "2026-11-10T18:22:38.289Z" + }, + "containers": { + "cna": { + "title": "Windows Text Services Framework Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:38.289Z" + }, + "references": [ + { + "name": "Windows Text Services Framework Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119818" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119821.json b/data/2026/119xxx/CVE-2026-119821.json new file mode 100644 index 0000000000..c0aec43899 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119821.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119821", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.749Z", + "datePublished": "2026-11-10T18:22:38.806Z", + "dateUpdated": "2026-11-10T18:22:38.806Z" + }, + "containers": { + "cna": { + "title": "Windows Network Connection Broker Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-290: Authentication Bypass by Spoofing", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-290" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:38.806Z" + }, + "references": [ + { + "name": "Windows Network Connection Broker Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119821" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119822.json b/data/2026/119xxx/CVE-2026-119822.json new file mode 100644 index 0000000000..1bd5182736 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119822.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119822", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.749Z", + "datePublished": "2026-11-10T18:22:39.833Z", + "dateUpdated": "2026-11-10T18:22:39.833Z" + }, + "containers": { + "cna": { + "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:39.833Z" + }, + "references": [ + { + "name": "Windows Overlay Filter Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119822" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119823.json b/data/2026/119xxx/CVE-2026-119823.json new file mode 100644 index 0000000000..caff00d174 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119823.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119823", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.749Z", + "datePublished": "2026-11-10T18:22:40.655Z", + "dateUpdated": "2026-11-10T18:22:40.655Z" + }, + "containers": { + "cna": { + "title": "Windows Storport Miniport Driver Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:40.655Z" + }, + "references": [ + { + "name": "Windows Storport Miniport Driver Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119823" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119824.json b/data/2026/119xxx/CVE-2026-119824.json new file mode 100644 index 0000000000..dac8e32b46 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119824.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119824", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.749Z", + "datePublished": "2026-11-10T18:22:41.226Z", + "dateUpdated": "2026-11-10T18:22:41.226Z" + }, + "containers": { + "cna": { + "title": "Remote Desktop Client Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Remote Desktop Client allows an unauthorized attacker to perform tampering over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:41.226Z" + }, + "references": [ + { + "name": "Remote Desktop Client Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119824" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119825.json b/data/2026/119xxx/CVE-2026-119825.json new file mode 100644 index 0000000000..cf489f5d13 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119825.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119825", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.749Z", + "datePublished": "2026-11-10T18:22:41.801Z", + "dateUpdated": "2026-11-10T18:22:41.801Z" + }, + "containers": { + "cna": { + "title": "Win32k Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:41.801Z" + }, + "references": [ + { + "name": "Win32k Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119825" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119826.json b/data/2026/119xxx/CVE-2026-119826.json new file mode 100644 index 0000000000..f99e0a7d3d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119826.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119826", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.749Z", + "datePublished": "2026-11-10T18:22:42.247Z", + "dateUpdated": "2026-11-10T18:22:42.247Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:42.247Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119826" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119827.json b/data/2026/119xxx/CVE-2026-119827.json new file mode 100644 index 0000000000..d23e5df131 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119827.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119827", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.749Z", + "datePublished": "2026-11-10T18:22:42.769Z", + "dateUpdated": "2026-11-10T18:22:42.769Z" + }, + "containers": { + "cna": { + "title": "Windows Win32k Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:42.769Z" + }, + "references": [ + { + "name": "Windows Win32k Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119827" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119829.json b/data/2026/119xxx/CVE-2026-119829.json new file mode 100644 index 0000000000..40a4cd2b6a --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119829.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119829", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:43.490Z", + "dateUpdated": "2026-11-10T18:22:43.490Z" + }, + "containers": { + "cna": { + "title": "Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:43.490Z" + }, + "references": [ + { + "name": "Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119829" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119830.json b/data/2026/119xxx/CVE-2026-119830.json new file mode 100644 index 0000000000..87da251692 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119830.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119830", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:44.088Z", + "dateUpdated": "2026-11-10T18:22:44.088Z" + }, + "containers": { + "cna": { + "title": "Windows Storport Miniport Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:44.088Z" + }, + "references": [ + { + "name": "Windows Storport Miniport Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119830" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119831.json b/data/2026/119xxx/CVE-2026-119831.json new file mode 100644 index 0000000000..207b04d279 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119831.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119831", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:44.618Z", + "dateUpdated": "2026-11-10T18:22:44.618Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:44.618Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119831" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119832.json b/data/2026/119xxx/CVE-2026-119832.json new file mode 100644 index 0000000000..8ff89a9bc1 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119832.json @@ -0,0 +1,385 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119832", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:45.185Z", + "dateUpdated": "2026-11-10T18:22:45.185Z" + }, + "containers": { + "cna": { + "title": "Windows BitLocker Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Security Feature Bypass", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:45.185Z" + }, + "references": [ + { + "name": "Windows BitLocker Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119832" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119833.json b/data/2026/119xxx/CVE-2026-119833.json new file mode 100644 index 0000000000..1aa078d5f3 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119833.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119833", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:45.733Z", + "dateUpdated": "2026-11-10T18:22:45.733Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Message Queuing allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:45.733Z" + }, + "references": [ + { + "name": "Windows Message Queuing Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119833" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119834.json b/data/2026/119xxx/CVE-2026-119834.json new file mode 100644 index 0000000000..bc8774a65d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119834.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119834", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:46.331Z", + "dateUpdated": "2026-11-10T18:22:46.331Z" + }, + "containers": { + "cna": { + "title": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:46.331Z" + }, + "references": [ + { + "name": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119834" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119835.json b/data/2026/119xxx/CVE-2026-119835.json new file mode 100644 index 0000000000..54e2a9866a --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119835.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119835", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:46.815Z", + "dateUpdated": "2026-11-10T18:22:46.815Z" + }, + "containers": { + "cna": { + "title": "Windows Smart Card Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:46.815Z" + }, + "references": [ + { + "name": "Windows Smart Card Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119835" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119836.json b/data/2026/119xxx/CVE-2026-119836.json new file mode 100644 index 0000000000..635d334632 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119836.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119836", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:47.381Z", + "dateUpdated": "2026-11-10T18:22:47.381Z" + }, + "containers": { + "cna": { + "title": "Windows Management Services Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Management Services allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:47.381Z" + }, + "references": [ + { + "name": "Windows Management Services Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119836" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119837.json b/data/2026/119xxx/CVE-2026-119837.json new file mode 100644 index 0000000000..3792453f77 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119837.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119837", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:47.911Z", + "dateUpdated": "2026-11-10T18:22:47.911Z" + }, + "containers": { + "cna": { + "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:47.911Z" + }, + "references": [ + { + "name": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119837" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119838.json b/data/2026/119xxx/CVE-2026-119838.json new file mode 100644 index 0000000000..b68d2d5160 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119838.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119838", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:48.500Z", + "dateUpdated": "2026-11-10T18:22:48.500Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:48.500Z" + }, + "references": [ + { + "name": "Windows Installer Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119838" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119839.json b/data/2026/119xxx/CVE-2026-119839.json new file mode 100644 index 0000000000..3067f52b78 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119839.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119839", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:48.945Z", + "dateUpdated": "2026-11-10T18:22:48.945Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted search path in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-426: Untrusted Search Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-426" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:48.945Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119839" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119840.json b/data/2026/119xxx/CVE-2026-119840.json new file mode 100644 index 0000000000..f88cfa0224 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119840.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119840", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:49.460Z", + "dateUpdated": "2026-11-10T18:22:49.460Z" + }, + "containers": { + "cna": { + "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:49.460Z" + }, + "references": [ + { + "name": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119840" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.3, + "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119841.json b/data/2026/119xxx/CVE-2026-119841.json new file mode 100644 index 0000000000..a3684352ad --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119841.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119841", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:34:55.750Z", + "datePublished": "2026-11-10T18:22:49.908Z", + "dateUpdated": "2026-11-10T18:22:49.908Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:49.908Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119841" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119844.json b/data/2026/119xxx/CVE-2026-119844.json new file mode 100644 index 0000000000..03898410eb --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119844.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119844", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.338Z", + "datePublished": "2026-11-10T18:22:50.386Z", + "dateUpdated": "2026-11-10T18:22:50.386Z" + }, + "containers": { + "cna": { + "title": "Windows Device Association Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:50.386Z" + }, + "references": [ + { + "name": "Windows Device Association Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119844" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119846.json b/data/2026/119xxx/CVE-2026-119846.json new file mode 100644 index 0000000000..0464a1fb0b --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119846.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119846", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:51.105Z", + "dateUpdated": "2026-11-10T18:22:51.105Z" + }, + "containers": { + "cna": { + "title": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:51.105Z" + }, + "references": [ + { + "name": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119846" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119847.json b/data/2026/119xxx/CVE-2026-119847.json new file mode 100644 index 0000000000..f2fff45699 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119847.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119847", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:51.554Z", + "dateUpdated": "2026-11-10T18:22:51.554Z" + }, + "containers": { + "cna": { + "title": "Windows Kerberos Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:51.554Z" + }, + "references": [ + { + "name": "Windows Kerberos Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119847" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119848.json b/data/2026/119xxx/CVE-2026-119848.json new file mode 100644 index 0000000000..9ab848e8ec --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119848.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119848", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:52.066Z", + "dateUpdated": "2026-11-10T18:22:52.066Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:52.066Z" + }, + "references": [ + { + "name": "Windows Message Queuing Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119848" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119849.json b/data/2026/119xxx/CVE-2026-119849.json new file mode 100644 index 0000000000..0aead88c59 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119849.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119849", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:52.571Z", + "dateUpdated": "2026-11-10T18:22:52.571Z" + }, + "containers": { + "cna": { + "title": "Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:52.571Z" + }, + "references": [ + { + "name": "Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119849" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119851.json b/data/2026/119xxx/CVE-2026-119851.json new file mode 100644 index 0000000000..527e9be0c2 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119851.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119851", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:53.098Z", + "dateUpdated": "2026-11-10T18:22:53.098Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:53.098Z" + }, + "references": [ + { + "name": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119851" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119852.json b/data/2026/119xxx/CVE-2026-119852.json new file mode 100644 index 0000000000..ce83bafee9 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119852.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119852", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:53.624Z", + "dateUpdated": "2026-11-10T18:22:53.624Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:53.624Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119852" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119853.json b/data/2026/119xxx/CVE-2026-119853.json new file mode 100644 index 0000000000..9a2c9508a2 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119853.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119853", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:54.218Z", + "dateUpdated": "2026-11-10T18:22:54.218Z" + }, + "containers": { + "cna": { + "title": "Remote Access API Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted search path in Windows Remote Access API allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-426: Untrusted Search Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-426" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:54.218Z" + }, + "references": [ + { + "name": "Remote Access API Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119853" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119855.json b/data/2026/119xxx/CVE-2026-119855.json new file mode 100644 index 0000000000..059a1a4fb4 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119855.json @@ -0,0 +1,446 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119855", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:54.668Z", + "dateUpdated": "2026-11-10T18:22:54.668Z" + }, + "containers": { + "cna": { + "title": "Windows COM+ Event System Service Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:54.668Z" + }, + "references": [ + { + "name": "Windows COM+ Event System Service Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119855" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119856.json b/data/2026/119xxx/CVE-2026-119856.json new file mode 100644 index 0000000000..022242394e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119856.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119856", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:55.180Z", + "dateUpdated": "2026-11-10T18:22:55.180Z" + }, + "containers": { + "cna": { + "title": "Win32k Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:55.180Z" + }, + "references": [ + { + "name": "Win32k Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119856" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119857.json b/data/2026/119xxx/CVE-2026-119857.json new file mode 100644 index 0000000000..4e7e7556fe --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119857.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119857", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:56.459Z", + "dateUpdated": "2026-11-10T18:22:56.459Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:56.459Z" + }, + "references": [ + { + "name": "Windows Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119857" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119858.json b/data/2026/119xxx/CVE-2026-119858.json new file mode 100644 index 0000000000..6b8b812e9e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119858.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119858", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.339Z", + "datePublished": "2026-11-10T18:22:55.885Z", + "dateUpdated": "2026-11-10T18:22:55.885Z" + }, + "containers": { + "cna": { + "title": "Remote Desktop Client Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:55.885Z" + }, + "references": [ + { + "name": "Remote Desktop Client Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119858" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119859.json b/data/2026/119xxx/CVE-2026-119859.json new file mode 100644 index 0000000000..4848e58e73 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119859.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119859", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:22:56.988Z", + "dateUpdated": "2026-11-10T18:22:56.988Z" + }, + "containers": { + "cna": { + "title": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:56.988Z" + }, + "references": [ + { + "name": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119859" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119860.json b/data/2026/119xxx/CVE-2026-119860.json new file mode 100644 index 0000000000..cbff5f0b49 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119860.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119860", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:22:57.526Z", + "dateUpdated": "2026-11-10T18:22:57.526Z" + }, + "containers": { + "cna": { + "title": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:57.526Z" + }, + "references": [ + { + "name": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119860" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119861.json b/data/2026/119xxx/CVE-2026-119861.json new file mode 100644 index 0000000000..e27286362f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119861.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119861", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:22:58.048Z", + "dateUpdated": "2026-11-10T18:22:58.048Z" + }, + "containers": { + "cna": { + "title": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:58.048Z" + }, + "references": [ + { + "name": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119861" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119862.json b/data/2026/119xxx/CVE-2026-119862.json new file mode 100644 index 0000000000..53534cded8 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119862.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119862", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:22:58.565Z", + "dateUpdated": "2026-11-10T18:22:58.565Z" + }, + "containers": { + "cna": { + "title": "Windows Input System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Input System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:58.565Z" + }, + "references": [ + { + "name": "Windows Input System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119862" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119865.json b/data/2026/119xxx/CVE-2026-119865.json new file mode 100644 index 0000000000..f0797ab9f3 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119865.json @@ -0,0 +1,540 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119865", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:22:59.024Z", + "dateUpdated": "2026-11-10T18:22:59.024Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:59.024Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119865" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119866.json b/data/2026/119xxx/CVE-2026-119866.json new file mode 100644 index 0000000000..fee6fcfba9 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119866.json @@ -0,0 +1,328 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119866", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:22:59.481Z", + "dateUpdated": "2026-11-10T18:22:59.481Z" + }, + "containers": { + "cna": { + "title": "Windows Device Association Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:59.481Z" + }, + "references": [ + { + "name": "Windows Device Association Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119866" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119867.json b/data/2026/119xxx/CVE-2026-119867.json new file mode 100644 index 0000000000..aa75039da1 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119867.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119867", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:23:00.038Z", + "dateUpdated": "2026-11-10T18:23:00.038Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper verification of cryptographic signature in Windows Installer allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-347: Improper Verification of Cryptographic Signature", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-347" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:00.038Z" + }, + "references": [ + { + "name": "Windows Installer Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119867" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119868.json b/data/2026/119xxx/CVE-2026-119868.json new file mode 100644 index 0000000000..b2057caebd --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119868.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119868", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:23:00.551Z", + "dateUpdated": "2026-11-10T18:23:00.551Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:00.551Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119868" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119869.json b/data/2026/119xxx/CVE-2026-119869.json new file mode 100644 index 0000000000..710ba16ac0 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119869.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119869", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:43:22.340Z", + "datePublished": "2026-11-10T18:23:01.061Z", + "dateUpdated": "2026-11-10T18:23:01.061Z" + }, + "containers": { + "cna": { + "title": "Windows Failover Cluster Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:01.061Z" + }, + "references": [ + { + "name": "Windows Failover Cluster Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119869" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119870.json b/data/2026/119xxx/CVE-2026-119870.json new file mode 100644 index 0000000000..466f2342d2 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119870.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119870", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.500Z", + "datePublished": "2026-11-10T18:23:02.165Z", + "dateUpdated": "2026-11-10T18:23:02.165Z" + }, + "containers": { + "cna": { + "title": "Windows SMB Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows SMB Client allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:02.165Z" + }, + "references": [ + { + "name": "Windows SMB Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119870" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119871.json b/data/2026/119xxx/CVE-2026-119871.json new file mode 100644 index 0000000000..bc6492ee63 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119871.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119871", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.501Z", + "datePublished": "2026-11-10T18:23:02.929Z", + "dateUpdated": "2026-11-10T18:23:02.929Z" + }, + "containers": { + "cna": { + "title": "Windows IP Translation Configuration Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:02.929Z" + }, + "references": [ + { + "name": "Windows IP Translation Configuration Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119871" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119872.json b/data/2026/119xxx/CVE-2026-119872.json new file mode 100644 index 0000000000..320916b9cc --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119872.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119872", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.501Z", + "datePublished": "2026-11-10T18:23:04.774Z", + "dateUpdated": "2026-11-10T18:23:04.774Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:04.774Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119872" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119873.json b/data/2026/119xxx/CVE-2026-119873.json new file mode 100644 index 0000000000..476042d8b3 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119873.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119873", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.501Z", + "datePublished": "2026-11-10T18:23:05.445Z", + "dateUpdated": "2026-11-10T18:23:05.445Z" + }, + "containers": { + "cna": { + "title": "Windows NetBIOS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:05.445Z" + }, + "references": [ + { + "name": "Windows NetBIOS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119873" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119874.json b/data/2026/119xxx/CVE-2026-119874.json new file mode 100644 index 0000000000..cb2a980810 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119874.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119874", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.501Z", + "datePublished": "2026-11-10T18:23:05.976Z", + "dateUpdated": "2026-11-10T18:23:05.976Z" + }, + "containers": { + "cna": { + "title": "Windows Device Association Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:05.976Z" + }, + "references": [ + { + "name": "Windows Device Association Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119874" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119875.json b/data/2026/119xxx/CVE-2026-119875.json new file mode 100644 index 0000000000..302d32acf2 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119875.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119875", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.501Z", + "datePublished": "2026-11-10T18:23:06.712Z", + "dateUpdated": "2026-11-10T18:23:06.712Z" + }, + "containers": { + "cna": { + "title": "Windows Storport Miniport Driver Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:06.712Z" + }, + "references": [ + { + "name": "Windows Storport Miniport Driver Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119875" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4, + "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119876.json b/data/2026/119xxx/CVE-2026-119876.json new file mode 100644 index 0000000000..f4e3f39b3d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119876.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119876", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.501Z", + "datePublished": "2026-11-10T18:23:07.158Z", + "dateUpdated": "2026-11-10T18:23:07.158Z" + }, + "containers": { + "cna": { + "title": "Windows USB Scanner Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:07.158Z" + }, + "references": [ + { + "name": "Windows USB Scanner Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119876" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119880.json b/data/2026/119xxx/CVE-2026-119880.json new file mode 100644 index 0000000000..7b41f00267 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119880.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119880", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.501Z", + "datePublished": "2026-11-10T18:23:07.860Z", + "dateUpdated": "2026-11-10T18:23:07.860Z" + }, + "containers": { + "cna": { + "title": "Microsoft XPS Document Converter Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:07.860Z" + }, + "references": [ + { + "name": "Microsoft XPS Document Converter Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119880" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119881.json b/data/2026/119xxx/CVE-2026-119881.json new file mode 100644 index 0000000000..77a54d645e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119881.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119881", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.501Z", + "datePublished": "2026-11-10T18:23:08.325Z", + "dateUpdated": "2026-11-10T18:23:08.325Z" + }, + "containers": { + "cna": { + "title": "Microsoft XPS Document Converter Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:08.325Z" + }, + "references": [ + { + "name": "Microsoft XPS Document Converter Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119881" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119882.json b/data/2026/119xxx/CVE-2026-119882.json new file mode 100644 index 0000000000..eba2a15a6e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119882.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119882", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:08.995Z", + "dateUpdated": "2026-11-10T18:23:08.995Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Services Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:08.995Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Services Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119882" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119883.json b/data/2026/119xxx/CVE-2026-119883.json new file mode 100644 index 0000000000..7e7dfdbd7f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119883.json @@ -0,0 +1,229 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119883", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:09.702Z", + "dateUpdated": "2026-11-10T18:23:09.702Z" + }, + "containers": { + "cna": { + "title": "Data Deduplication Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authorization in Data Deduplication allows an authorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "Security Feature Bypass", + "lang": "en-US", + "type": "Impact" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:09.702Z" + }, + "references": [ + { + "name": "Data Deduplication Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119883" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "LOW", + "baseScore": 3.3, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119884.json b/data/2026/119xxx/CVE-2026-119884.json new file mode 100644 index 0000000000..4131ec0e69 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119884.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119884", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:10.342Z", + "dateUpdated": "2026-11-10T18:23:10.342Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:10.342Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119884" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119885.json b/data/2026/119xxx/CVE-2026-119885.json new file mode 100644 index 0000000000..ad86bafd91 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119885.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119885", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:11.508Z", + "dateUpdated": "2026-11-10T18:23:11.508Z" + }, + "containers": { + "cna": { + "title": "Windows Storport Miniport Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:11.508Z" + }, + "references": [ + { + "name": "Windows Storport Miniport Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119885" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119886.json b/data/2026/119xxx/CVE-2026-119886.json new file mode 100644 index 0000000000..0145041530 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119886.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119886", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:12.012Z", + "dateUpdated": "2026-11-10T18:23:12.012Z" + }, + "containers": { + "cna": { + "title": "Windows Telephony Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:12.012Z" + }, + "references": [ + { + "name": "Windows Telephony Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119886" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119887.json b/data/2026/119xxx/CVE-2026-119887.json new file mode 100644 index 0000000000..f17ad1b88d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119887.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119887", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:12.620Z", + "dateUpdated": "2026-11-10T18:23:12.620Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:12.620Z" + }, + "references": [ + { + "name": "Windows Installer Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119887" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119888.json b/data/2026/119xxx/CVE-2026-119888.json new file mode 100644 index 0000000000..824b7f1b62 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119888.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119888", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:13.223Z", + "dateUpdated": "2026-11-10T18:23:13.223Z" + }, + "containers": { + "cna": { + "title": "Windows Audio Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:13.223Z" + }, + "references": [ + { + "name": "Windows Audio Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119888" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119889.json b/data/2026/119xxx/CVE-2026-119889.json new file mode 100644 index 0000000000..e06c69f429 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119889.json @@ -0,0 +1,303 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119889", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:13.816Z", + "dateUpdated": "2026-11-10T18:23:13.816Z" + }, + "containers": { + "cna": { + "title": "ActiveSyncProvider Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:13.816Z" + }, + "references": [ + { + "name": "ActiveSyncProvider Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119889" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119890.json b/data/2026/119xxx/CVE-2026-119890.json new file mode 100644 index 0000000000..a2073a2ef2 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119890.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119890", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:14.339Z", + "dateUpdated": "2026-11-10T18:23:14.339Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:14.339Z" + }, + "references": [ + { + "name": "Windows DHCP Server Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119890" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119892.json b/data/2026/119xxx/CVE-2026-119892.json new file mode 100644 index 0000000000..e7913847cc --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119892.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119892", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:14.941Z", + "dateUpdated": "2026-11-10T18:23:14.941Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:14.941Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119892" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119893.json b/data/2026/119xxx/CVE-2026-119893.json new file mode 100644 index 0000000000..0eca149f28 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119893.json @@ -0,0 +1,219 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119893", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.502Z", + "datePublished": "2026-11-10T18:23:15.507Z", + "dateUpdated": "2026-11-10T18:23:15.507Z" + }, + "containers": { + "cna": { + "title": "Windows Audio Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:15.507Z" + }, + "references": [ + { + "name": "Windows Audio Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119893" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119894.json b/data/2026/119xxx/CVE-2026-119894.json new file mode 100644 index 0000000000..789bfe613d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119894.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119894", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.503Z", + "datePublished": "2026-11-10T18:23:16.061Z", + "dateUpdated": "2026-11-10T18:23:16.061Z" + }, + "containers": { + "cna": { + "title": "Windows Audio Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:16.061Z" + }, + "references": [ + { + "name": "Windows Audio Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119894" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119895.json b/data/2026/119xxx/CVE-2026-119895.json new file mode 100644 index 0000000000..984569ad6c --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119895.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119895", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:52:31.503Z", + "datePublished": "2026-11-10T18:23:16.578Z", + "dateUpdated": "2026-11-10T18:23:16.578Z" + }, + "containers": { + "cna": { + "title": "Windows Audio Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:16.578Z" + }, + "references": [ + { + "name": "Windows Audio Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119895" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119898.json b/data/2026/119xxx/CVE-2026-119898.json new file mode 100644 index 0000000000..ef3f3766d2 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119898.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119898", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.247Z", + "datePublished": "2026-11-10T18:23:18.241Z", + "dateUpdated": "2026-11-10T18:23:18.241Z" + }, + "containers": { + "cna": { + "title": "Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:18.241Z" + }, + "references": [ + { + "name": "Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119898" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119899.json b/data/2026/119xxx/CVE-2026-119899.json new file mode 100644 index 0000000000..4755b12823 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119899.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119899", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.247Z", + "datePublished": "2026-11-10T18:23:19.893Z", + "dateUpdated": "2026-11-10T18:23:19.893Z" + }, + "containers": { + "cna": { + "title": "Windows Win32k Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:19.893Z" + }, + "references": [ + { + "name": "Windows Win32k Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119899" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119900.json b/data/2026/119xxx/CVE-2026-119900.json new file mode 100644 index 0000000000..d536fa95ee --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119900.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119900", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.247Z", + "datePublished": "2026-11-10T18:23:18.860Z", + "dateUpdated": "2026-11-10T18:23:18.860Z" + }, + "containers": { + "cna": { + "title": "Windows NTFS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:18.860Z" + }, + "references": [ + { + "name": "Windows NTFS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119900" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119901.json b/data/2026/119xxx/CVE-2026-119901.json new file mode 100644 index 0000000000..129dd36109 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119901.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119901", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.247Z", + "datePublished": "2026-11-10T18:23:19.438Z", + "dateUpdated": "2026-11-10T18:23:19.438Z" + }, + "containers": { + "cna": { + "title": "Windows MIDI Service Module Elevation of Privileges Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:19.438Z" + }, + "references": [ + { + "name": "Windows MIDI Service Module Elevation of Privileges Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119901" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119903.json b/data/2026/119xxx/CVE-2026-119903.json new file mode 100644 index 0000000000..69ccd59369 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119903.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119903", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:17.158Z", + "dateUpdated": "2026-11-10T18:23:17.158Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-22" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:17.158Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119903" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119904.json b/data/2026/119xxx/CVE-2026-119904.json new file mode 100644 index 0000000000..6584fdfd5d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119904.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119904", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:20.415Z", + "dateUpdated": "2026-11-10T18:23:20.415Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows Speech Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:20.415Z" + }, + "references": [ + { + "name": "Microsoft Windows Speech Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119904" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119905.json b/data/2026/119xxx/CVE-2026-119905.json new file mode 100644 index 0000000000..50bd668df1 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119905.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119905", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:17.630Z", + "dateUpdated": "2026-11-10T18:23:17.630Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper input validation in Windows DNS allows an authorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-22" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:17.630Z" + }, + "references": [ + { + "name": "Windows DNS Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119905" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119906.json b/data/2026/119xxx/CVE-2026-119906.json new file mode 100644 index 0000000000..4816484f65 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119906.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119906", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:21.400Z", + "dateUpdated": "2026-11-10T18:23:21.400Z" + }, + "containers": { + "cna": { + "title": "Windows Sandbox Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_sandbox:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "0.8.111.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Sandbox", + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "0.8.111.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-78" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:21.400Z" + }, + "references": [ + { + "name": "Windows Sandbox Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119906" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119907.json b/data/2026/119xxx/CVE-2026-119907.json new file mode 100644 index 0000000000..99db2562bd --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119907.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119907", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:20.858Z", + "dateUpdated": "2026-11-10T18:23:20.858Z" + }, + "containers": { + "cna": { + "title": "Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:20.858Z" + }, + "references": [ + { + "name": "Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119907" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119908.json b/data/2026/119xxx/CVE-2026-119908.json new file mode 100644 index 0000000000..219424a3ad --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119908.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119908", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:21.842Z", + "dateUpdated": "2026-11-10T18:23:21.842Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Spaces Controller Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:21.842Z" + }, + "references": [ + { + "name": "Windows Storage Spaces Controller Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119908" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119909.json b/data/2026/119xxx/CVE-2026-119909.json new file mode 100644 index 0000000000..14484c318e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119909.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119909", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:22.422Z", + "dateUpdated": "2026-11-10T18:23:22.422Z" + }, + "containers": { + "cna": { + "title": "Windows Internet Information Services Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:22.422Z" + }, + "references": [ + { + "name": "Windows Internet Information Services Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119909" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119910.json b/data/2026/119xxx/CVE-2026-119910.json new file mode 100644 index 0000000000..10860a1bc1 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119910.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119910", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:23.063Z", + "dateUpdated": "2026-11-10T18:23:23.063Z" + }, + "containers": { + "cna": { + "title": "Win32k Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:23.063Z" + }, + "references": [ + { + "name": "Win32k Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119910" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119912.json b/data/2026/119xxx/CVE-2026-119912.json new file mode 100644 index 0000000000..e00808f1f9 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119912.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119912", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:23.518Z", + "dateUpdated": "2026-11-10T18:23:23.518Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:23.518Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119912" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.7, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119913.json b/data/2026/119xxx/CVE-2026-119913.json new file mode 100644 index 0000000000..5f6f47bcb0 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119913.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119913", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:23.966Z", + "dateUpdated": "2026-11-10T18:23:23.966Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:23.966Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119913" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119914.json b/data/2026/119xxx/CVE-2026-119914.json new file mode 100644 index 0000000000..45b1ac8c06 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119914.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119914", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:24.530Z", + "dateUpdated": "2026-11-10T18:23:24.530Z" + }, + "containers": { + "cna": { + "title": "Windows Setup and Deployment Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper restriction of communication channel to intended endpoints in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-923: Improper Restriction of Communication Channel to Intended Endpoints", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-923" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:24.530Z" + }, + "references": [ + { + "name": "Windows Setup and Deployment Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119914" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119916.json b/data/2026/119xxx/CVE-2026-119916.json new file mode 100644 index 0000000000..c0f2aaf098 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119916.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119916", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:25.160Z", + "dateUpdated": "2026-11-10T18:23:25.160Z" + }, + "containers": { + "cna": { + "title": "Windows Input System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:25.160Z" + }, + "references": [ + { + "name": "Windows Input System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119916" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119917.json b/data/2026/119xxx/CVE-2026-119917.json new file mode 100644 index 0000000000..bb4d235d3c --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119917.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119917", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.248Z", + "datePublished": "2026-11-10T18:23:25.792Z", + "dateUpdated": "2026-11-10T18:23:25.792Z" + }, + "containers": { + "cna": { + "title": "Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:25.792Z" + }, + "references": [ + { + "name": "Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119917" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119918.json b/data/2026/119xxx/CVE-2026-119918.json new file mode 100644 index 0000000000..e8f44b5dd0 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119918.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119918", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.249Z", + "datePublished": "2026-11-10T18:23:26.383Z", + "dateUpdated": "2026-11-10T18:23:26.383Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:26.383Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119918" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119919.json b/data/2026/119xxx/CVE-2026-119919.json new file mode 100644 index 0000000000..aa794a7676 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119919.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119919", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.249Z", + "datePublished": "2026-11-10T18:23:26.950Z", + "dateUpdated": "2026-11-10T18:23:26.950Z" + }, + "containers": { + "cna": { + "title": "Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:26.950Z" + }, + "references": [ + { + "name": "Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119919" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119921.json b/data/2026/119xxx/CVE-2026-119921.json new file mode 100644 index 0000000000..bdb9b5c90d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119921.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119921", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T16:58:45.249Z", + "datePublished": "2026-11-10T18:23:27.405Z", + "dateUpdated": "2026-11-10T18:23:27.405Z" + }, + "containers": { + "cna": { + "title": "Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:27.405Z" + }, + "references": [ + { + "name": "Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119921" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119925.json b/data/2026/119xxx/CVE-2026-119925.json new file mode 100644 index 0000000000..5a426f96e8 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119925.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119925", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:27.923Z", + "dateUpdated": "2026-11-10T18:23:27.923Z" + }, + "containers": { + "cna": { + "title": "Windows Text Services Framework Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:27.923Z" + }, + "references": [ + { + "name": "Windows Text Services Framework Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119925" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119928.json b/data/2026/119xxx/CVE-2026-119928.json new file mode 100644 index 0000000000..ceec877b22 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119928.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119928", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:28.571Z", + "dateUpdated": "2026-11-10T18:23:28.571Z" + }, + "containers": { + "cna": { + "title": "Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:28.571Z" + }, + "references": [ + { + "name": "Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119928" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119929.json b/data/2026/119xxx/CVE-2026-119929.json new file mode 100644 index 0000000000..796eb07f2b --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119929.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119929", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:29.103Z", + "dateUpdated": "2026-11-10T18:23:29.103Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:29.103Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119929" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119931.json b/data/2026/119xxx/CVE-2026-119931.json new file mode 100644 index 0000000000..0d5cee94c0 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119931.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119931", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:29.619Z", + "dateUpdated": "2026-11-10T18:23:29.619Z" + }, + "containers": { + "cna": { + "title": "Windows Text Services Framework Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:29.619Z" + }, + "references": [ + { + "name": "Windows Text Services Framework Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119931" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119932.json b/data/2026/119xxx/CVE-2026-119932.json new file mode 100644 index 0000000000..b531ead2c4 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119932.json @@ -0,0 +1,468 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119932", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:30.171Z", + "dateUpdated": "2026-11-10T18:23:30.171Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_app_client_for_windows_desktop:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "1.00", + "versionEndExcluding": "2.0.1489.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows App Client for Windows Desktop", + "versions": [ + { + "version": "1.00", + "lessThan": "2.0.1489.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:30.171Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119932" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119933.json b/data/2026/119xxx/CVE-2026-119933.json new file mode 100644 index 0000000000..bb6a1aec1f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119933.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119933", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:30.620Z", + "dateUpdated": "2026-11-10T18:23:30.620Z" + }, + "containers": { + "cna": { + "title": "Windows NTFS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows NTFS allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:30.620Z" + }, + "references": [ + { + "name": "Windows NTFS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119933" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119934.json b/data/2026/119xxx/CVE-2026-119934.json new file mode 100644 index 0000000000..a2167bf9ed --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119934.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119934", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:31.141Z", + "dateUpdated": "2026-11-10T18:23:31.141Z" + }, + "containers": { + "cna": { + "title": "Remote Desktop Client Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:31.141Z" + }, + "references": [ + { + "name": "Remote Desktop Client Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119934" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119935.json b/data/2026/119xxx/CVE-2026-119935.json new file mode 100644 index 0000000000..12583bea3e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119935.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119935", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:31.758Z", + "dateUpdated": "2026-11-10T18:23:31.758Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:31.758Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119935" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119936.json b/data/2026/119xxx/CVE-2026-119936.json new file mode 100644 index 0000000000..90c3551c1f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119936.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119936", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:32.214Z", + "dateUpdated": "2026-11-10T18:23:32.214Z" + }, + "containers": { + "cna": { + "title": "Windows Internet Information Services Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:32.214Z" + }, + "references": [ + { + "name": "Windows Internet Information Services Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119936" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119937.json b/data/2026/119xxx/CVE-2026-119937.json new file mode 100644 index 0000000000..8ceb2d8a54 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119937.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119937", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:32.750Z", + "dateUpdated": "2026-11-10T18:23:32.750Z" + }, + "containers": { + "cna": { + "title": "Kernel Streaming Service Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:32.750Z" + }, + "references": [ + { + "name": "Kernel Streaming Service Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119937" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119938.json b/data/2026/119xxx/CVE-2026-119938.json new file mode 100644 index 0000000000..656df57458 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119938.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119938", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.767Z", + "datePublished": "2026-11-10T18:23:33.335Z", + "dateUpdated": "2026-11-10T18:23:33.335Z" + }, + "containers": { + "cna": { + "title": "Windows Shell Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:33.335Z" + }, + "references": [ + { + "name": "Windows Shell Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119938" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119939.json b/data/2026/119xxx/CVE-2026-119939.json new file mode 100644 index 0000000000..acae4192c8 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119939.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119939", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:33.858Z", + "dateUpdated": "2026-11-10T18:23:33.858Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper privilege management in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-73: External Control of File Name or Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-73" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:33.858Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119939" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119940.json b/data/2026/119xxx/CVE-2026-119940.json new file mode 100644 index 0000000000..b6869c7933 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119940.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119940", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:34.366Z", + "dateUpdated": "2026-11-10T18:23:34.366Z" + }, + "containers": { + "cna": { + "title": "Windows Kerberos Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:34.366Z" + }, + "references": [ + { + "name": "Windows Kerberos Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119940" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119941.json b/data/2026/119xxx/CVE-2026-119941.json new file mode 100644 index 0000000000..cd3dac5dec --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119941.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119941", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:35.226Z", + "dateUpdated": "2026-11-10T18:23:35.226Z" + }, + "containers": { + "cna": { + "title": "Volume Shadow Copy Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:35.226Z" + }, + "references": [ + { + "name": "Volume Shadow Copy Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119941" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119942.json b/data/2026/119xxx/CVE-2026-119942.json new file mode 100644 index 0000000000..2c92bbde28 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119942.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119942", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:35.746Z", + "dateUpdated": "2026-11-10T18:23:35.746Z" + }, + "containers": { + "cna": { + "title": "HTTP.sys Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:35.746Z" + }, + "references": [ + { + "name": "HTTP.sys Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119942" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119943.json b/data/2026/119xxx/CVE-2026-119943.json new file mode 100644 index 0000000000..8c2257a885 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119943.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119943", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:36.337Z", + "dateUpdated": "2026-11-10T18:23:36.337Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:36.337Z" + }, + "references": [ + { + "name": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119943" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119944.json b/data/2026/119xxx/CVE-2026-119944.json new file mode 100644 index 0000000000..93d11d2332 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119944.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119944", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:36.871Z", + "dateUpdated": "2026-11-10T18:23:36.871Z" + }, + "containers": { + "cna": { + "title": "Windows Mobile Device Management Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:36.871Z" + }, + "references": [ + { + "name": "Windows Mobile Device Management Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119944" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119945.json b/data/2026/119xxx/CVE-2026-119945.json new file mode 100644 index 0000000000..5b7b013352 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119945.json @@ -0,0 +1,328 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119945", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:37.398Z", + "dateUpdated": "2026-11-10T18:23:37.398Z" + }, + "containers": { + "cna": { + "title": "Windows Modern Device Management (MDM) Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:37.398Z" + }, + "references": [ + { + "name": "Windows Modern Device Management (MDM) Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119945" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119946.json b/data/2026/119xxx/CVE-2026-119946.json new file mode 100644 index 0000000000..4039a4cf2f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119946.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119946", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:37.920Z", + "dateUpdated": "2026-11-10T18:23:37.920Z" + }, + "containers": { + "cna": { + "title": "HTTP.sys Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows HTTP.sys allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-522: Insufficiently Protected Credentials", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-522" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:37.920Z" + }, + "references": [ + { + "name": "HTTP.sys Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119946" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119947.json b/data/2026/119xxx/CVE-2026-119947.json new file mode 100644 index 0000000000..5b7a899239 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119947.json @@ -0,0 +1,446 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119947", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:38.429Z", + "dateUpdated": "2026-11-10T18:23:38.429Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:38.429Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119947" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119948.json b/data/2026/119xxx/CVE-2026-119948.json new file mode 100644 index 0000000000..97fa5f91f5 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119948.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119948", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:39.116Z", + "dateUpdated": "2026-11-10T18:23:39.116Z" + }, + "containers": { + "cna": { + "title": "Windows Active Directory Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Active Directory allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:39.116Z" + }, + "references": [ + { + "name": "Windows Active Directory Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119948" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119950.json b/data/2026/119xxx/CVE-2026-119950.json new file mode 100644 index 0000000000..fdc19120b7 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119950.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119950", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:05:20.768Z", + "datePublished": "2026-11-10T18:23:40.563Z", + "dateUpdated": "2026-11-10T18:23:40.563Z" + }, + "containers": { + "cna": { + "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:40.563Z" + }, + "references": [ + { + "name": "Windows Print Spooler Components Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119950" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119951.json b/data/2026/119xxx/CVE-2026-119951.json new file mode 100644 index 0000000000..32ffda02d8 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119951.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119951", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.114Z", + "datePublished": "2026-11-10T18:23:41.095Z", + "dateUpdated": "2026-11-10T18:23:41.095Z" + }, + "containers": { + "cna": { + "title": "Windows Deployment Services Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:41.095Z" + }, + "references": [ + { + "name": "Windows Deployment Services Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119951" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119952.json b/data/2026/119xxx/CVE-2026-119952.json new file mode 100644 index 0000000000..de04e97f11 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119952.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119952", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:41.678Z", + "dateUpdated": "2026-11-10T18:23:41.678Z" + }, + "containers": { + "cna": { + "title": "Windows Schannel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-208: Observable Timing Discrepancy", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-208" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:41.678Z" + }, + "references": [ + { + "name": "Windows Schannel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119952" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119953.json b/data/2026/119xxx/CVE-2026-119953.json new file mode 100644 index 0000000000..035493d08d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119953.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119953", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:42.344Z", + "dateUpdated": "2026-11-10T18:23:42.344Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:42.344Z" + }, + "references": [ + { + "name": "Windows DNS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119953" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119954.json b/data/2026/119xxx/CVE-2026-119954.json new file mode 100644 index 0000000000..59bbd36dd1 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119954.json @@ -0,0 +1,392 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119954", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:42.932Z", + "dateUpdated": "2026-11-10T18:23:42.932Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-36: Absolute Path Traversal", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-36" + }, + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:42.932Z" + }, + "references": [ + { + "name": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119954" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119955.json b/data/2026/119xxx/CVE-2026-119955.json new file mode 100644 index 0000000000..16d2458df7 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119955.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119955", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:43.510Z", + "dateUpdated": "2026-11-10T18:23:43.510Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:43.510Z" + }, + "references": [ + { + "name": "Windows Hyper-V Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119955" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119957.json b/data/2026/119xxx/CVE-2026-119957.json new file mode 100644 index 0000000000..779ea16fc6 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119957.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119957", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:44.135Z", + "dateUpdated": "2026-11-10T18:23:44.135Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Services Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:44.135Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Services Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119957" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119958.json b/data/2026/119xxx/CVE-2026-119958.json new file mode 100644 index 0000000000..dcd43d4a16 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119958.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119958", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:44.657Z", + "dateUpdated": "2026-11-10T18:23:44.657Z" + }, + "containers": { + "cna": { + "title": "Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-787: Out-of-bounds Write", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-787" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:44.657Z" + }, + "references": [ + { + "name": "Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119958" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119959.json b/data/2026/119xxx/CVE-2026-119959.json new file mode 100644 index 0000000000..edefbec6ea --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119959.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119959", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:20:41.905Z", + "dateUpdated": "2026-11-10T18:20:41.905Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-290: Authentication Bypass by Spoofing", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-290" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:41.905Z" + }, + "references": [ + { + "name": "Windows Hyper-V Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119959" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119960.json b/data/2026/119xxx/CVE-2026-119960.json new file mode 100644 index 0000000000..9fa6ae335b --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119960.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119960", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:45.279Z", + "dateUpdated": "2026-11-10T18:23:45.279Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:45.279Z" + }, + "references": [ + { + "name": "Windows Hyper-V Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119960" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119961.json b/data/2026/119xxx/CVE-2026-119961.json new file mode 100644 index 0000000000..4f78caef16 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119961.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119961", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:45.724Z", + "dateUpdated": "2026-11-10T18:23:45.724Z" + }, + "containers": { + "cna": { + "title": "Windows Internet Information Services Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:45.724Z" + }, + "references": [ + { + "name": "Windows Internet Information Services Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119961" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119962.json b/data/2026/119xxx/CVE-2026-119962.json new file mode 100644 index 0000000000..3eaaa0acbc --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119962.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119962", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.115Z", + "datePublished": "2026-11-10T18:23:46.313Z", + "dateUpdated": "2026-11-10T18:23:46.313Z" + }, + "containers": { + "cna": { + "title": "Windows CredSSP Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:46.313Z" + }, + "references": [ + { + "name": "Windows CredSSP Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119962" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119963.json b/data/2026/119xxx/CVE-2026-119963.json new file mode 100644 index 0000000000..0cb121e925 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119963.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119963", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:46.832Z", + "dateUpdated": "2026-11-10T18:23:46.832Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:46.832Z" + }, + "references": [ + { + "name": "Windows Message Queuing Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119963" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119964.json b/data/2026/119xxx/CVE-2026-119964.json new file mode 100644 index 0000000000..19441f6023 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119964.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119964", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:47.286Z", + "dateUpdated": "2026-11-10T18:23:47.286Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:47.286Z" + }, + "references": [ + { + "name": "Windows Message Queuing Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119964" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119965.json b/data/2026/119xxx/CVE-2026-119965.json new file mode 100644 index 0000000000..42cbf350f8 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119965.json @@ -0,0 +1,254 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119965", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:47.805Z", + "dateUpdated": "2026-11-10T18:23:47.805Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:47.805Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119965" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119966.json b/data/2026/119xxx/CVE-2026-119966.json new file mode 100644 index 0000000000..9d6b22d9d0 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119966.json @@ -0,0 +1,233 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119966", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:48.325Z", + "dateUpdated": "2026-11-10T18:23:48.325Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:48.325Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119966" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119967.json b/data/2026/119xxx/CVE-2026-119967.json new file mode 100644 index 0000000000..ff93d6bb73 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119967.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119967", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:48.950Z", + "dateUpdated": "2026-11-10T18:23:48.950Z" + }, + "containers": { + "cna": { + "title": "Windows Message Queuing Queue Manager Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:48.950Z" + }, + "references": [ + { + "name": "Windows Message Queuing Queue Manager Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119967" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119969.json b/data/2026/119xxx/CVE-2026-119969.json new file mode 100644 index 0000000000..2ab40f7492 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119969.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119969", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:49.539Z", + "dateUpdated": "2026-11-10T18:23:49.539Z" + }, + "containers": { + "cna": { + "title": "Graphic Fonts Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:49.539Z" + }, + "references": [ + { + "name": "Graphic Fonts Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119969" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119970.json b/data/2026/119xxx/CVE-2026-119970.json new file mode 100644 index 0000000000..35bf21b03c --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119970.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119970", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:49.995Z", + "dateUpdated": "2026-11-10T18:23:49.995Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:49.995Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119970" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119971.json b/data/2026/119xxx/CVE-2026-119971.json new file mode 100644 index 0000000000..17857c38fd --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119971.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119971", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:50.516Z", + "dateUpdated": "2026-11-10T18:23:50.516Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:50.516Z" + }, + "references": [ + { + "name": "Windows DNS Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119971" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119972.json b/data/2026/119xxx/CVE-2026-119972.json new file mode 100644 index 0000000000..524fd67fd9 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119972.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119972", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:50.986Z", + "dateUpdated": "2026-11-10T18:23:50.986Z" + }, + "containers": { + "cna": { + "title": "Remote Procedure Call Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:50.986Z" + }, + "references": [ + { + "name": "Remote Procedure Call Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119972" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119974.json b/data/2026/119xxx/CVE-2026-119974.json new file mode 100644 index 0000000000..d78d0a264f --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119974.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119974", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:23:51.448Z", + "dateUpdated": "2026-11-10T18:23:51.448Z" + }, + "containers": { + "cna": { + "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:51.448Z" + }, + "references": [ + { + "name": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119974" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119975.json b/data/2026/119xxx/CVE-2026-119975.json new file mode 100644 index 0000000000..f3b7ec2a6e --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119975.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119975", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.116Z", + "datePublished": "2026-11-10T18:22:04.318Z", + "dateUpdated": "2026-11-10T18:22:04.318Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:04.318Z" + }, + "references": [ + { + "name": "Visual Studio Code Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119975" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119976.json b/data/2026/119xxx/CVE-2026-119976.json new file mode 100644 index 0000000000..d3aa5190dc --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119976.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119976", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:10:41.117Z", + "datePublished": "2026-11-10T18:22:04.843Z", + "dateUpdated": "2026-11-10T18:22:04.843Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-73: External Control of File Name or Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-73" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:04.843Z" + }, + "references": [ + { + "name": "Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119976" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119981.json b/data/2026/119xxx/CVE-2026-119981.json new file mode 100644 index 0000000000..17e7899103 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119981.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119981", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.875Z", + "datePublished": "2026-11-10T18:22:05.368Z", + "dateUpdated": "2026-11-10T18:22:05.368Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:05.368Z" + }, + "references": [ + { + "name": "Visual Studio Code Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119981" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119982.json b/data/2026/119xxx/CVE-2026-119982.json new file mode 100644 index 0000000000..6d2e4b2908 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119982.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119982", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:22:05.943Z", + "dateUpdated": "2026-11-10T18:22:05.943Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:05.943Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119982" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119983.json b/data/2026/119xxx/CVE-2026-119983.json new file mode 100644 index 0000000000..cf37188b40 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119983.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119983", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:23:53.381Z", + "dateUpdated": "2026-11-10T18:23:53.381Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-918" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:53.381Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119983" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119985.json b/data/2026/119xxx/CVE-2026-119985.json new file mode 100644 index 0000000000..1182e9d858 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119985.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119985", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:21:56.732Z", + "dateUpdated": "2026-11-10T18:21:56.732Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:56.732Z" + }, + "references": [ + { + "name": "Visual Studio Code Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119985" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119986.json b/data/2026/119xxx/CVE-2026-119986.json new file mode 100644 index 0000000000..cfd480cedc --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119986.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119986", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:22:06.402Z", + "dateUpdated": "2026-11-10T18:22:06.402Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:06.402Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119986" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119987.json b/data/2026/119xxx/CVE-2026-119987.json new file mode 100644 index 0000000000..91857d24bd --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119987.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119987", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:21:54.104Z", + "dateUpdated": "2026-11-10T18:21:54.104Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows App Store Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-426: Untrusted Search Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-426" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:54.104Z" + }, + "references": [ + { + "name": "Microsoft Windows App Store Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119987" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119988.json b/data/2026/119xxx/CVE-2026-119988.json new file mode 100644 index 0000000000..97285141dd --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119988.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119988", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:23:51.976Z", + "dateUpdated": "2026-11-10T18:23:51.976Z" + }, + "containers": { + "cna": { + "title": "Windows SMB Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:51.976Z" + }, + "references": [ + { + "name": "Windows SMB Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119988" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119989.json b/data/2026/119xxx/CVE-2026-119989.json new file mode 100644 index 0000000000..2e744f3130 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119989.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119989", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:23:52.420Z", + "dateUpdated": "2026-11-10T18:23:52.420Z" + }, + "containers": { + "cna": { + "title": "Azure Pipelines Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_web_apps:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "2.10.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Web Apps", + "versions": [ + { + "version": "1.0.0", + "lessThan": "2.10.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-77" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:52.420Z" + }, + "references": [ + { + "name": "Azure Pipelines Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119989" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.2, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119990.json b/data/2026/119xxx/CVE-2026-119990.json new file mode 100644 index 0000000000..8d756ebdda --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119990.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119990", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:21:39.815Z", + "dateUpdated": "2026-11-10T18:21:39.815Z" + }, + "containers": { + "cna": { + "title": "Azure OpenAI Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_open-AI:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "hyena-infra-build-official/20260923.14" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Open AI", + "versions": [ + { + "version": "1.0.0", + "lessThan": "hyena-infra-build-official/20260923.14", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:39.815Z" + }, + "references": [ + { + "name": "Azure OpenAI Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119990" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119991.json b/data/2026/119xxx/CVE-2026-119991.json new file mode 100644 index 0000000000..3e30a6e314 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119991.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119991", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:20:38.205Z", + "dateUpdated": "2026-11-10T18:20:38.205Z" + }, + "containers": { + "cna": { + "title": "Microsoft Configuration Manager Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:configuration_manager_2603:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "5.0.9146.1045" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Configuration Manager 2603", + "versions": [ + { + "version": "1.0.0", + "lessThan": "5.0.9146.1045", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:38.205Z" + }, + "references": [ + { + "name": "Microsoft Configuration Manager Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119991" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119992.json b/data/2026/119xxx/CVE-2026-119992.json new file mode 100644 index 0000000000..e5b5b64cc3 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119992.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119992", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.876Z", + "datePublished": "2026-11-10T18:21:55.133Z", + "dateUpdated": "2026-11-10T18:21:55.133Z" + }, + "containers": { + "cna": { + "title": "Windows HTTP.sys Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:55.133Z" + }, + "references": [ + { + "name": "Windows HTTP.sys Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119992" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119993.json b/data/2026/119xxx/CVE-2026-119993.json new file mode 100644 index 0000000000..5d7349ae1d --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119993.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119993", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:06.709Z", + "dateUpdated": "2026-11-10T18:25:06.709Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Access of resource using incompatible type ('type confusion') in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:06.709Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119993" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119995.json b/data/2026/119xxx/CVE-2026-119995.json new file mode 100644 index 0000000000..0f8580ddd4 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119995.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119995", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:07.231Z", + "dateUpdated": "2026-11-10T18:25:07.231Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:07.231Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119995" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119996.json b/data/2026/119xxx/CVE-2026-119996.json new file mode 100644 index 0000000000..5ea6a17685 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119996.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119996", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:07.814Z", + "dateUpdated": "2026-11-10T18:25:07.814Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:07.814Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119996" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119997.json b/data/2026/119xxx/CVE-2026-119997.json new file mode 100644 index 0000000000..6e321c36cc --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119997.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119997", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:08.256Z", + "dateUpdated": "2026-11-10T18:25:08.256Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:08.256Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119997" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119998.json b/data/2026/119xxx/CVE-2026-119998.json new file mode 100644 index 0000000000..9300b6b0d1 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119998.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119998", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:08.761Z", + "dateUpdated": "2026-11-10T18:25:08.761Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-356: Product UI does not Warn User of Unsafe Actions", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-356" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:08.761Z" + }, + "references": [ + { + "name": "Microsoft Office Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119998" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/119xxx/CVE-2026-119999.json b/data/2026/119xxx/CVE-2026-119999.json new file mode 100644 index 0000000000..1223771775 --- /dev/null +++ b/data/2026/119xxx/CVE-2026-119999.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-119999", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:09.373Z", + "dateUpdated": "2026-11-10T18:25:09.373Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:09.373Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119999" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120000.json b/data/2026/120xxx/CVE-2026-120000.json new file mode 100644 index 0000000000..e020a5450e --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120000.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120000", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:09.875Z", + "dateUpdated": "2026-11-10T18:25:09.875Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-502: Deserialization of Untrusted Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-502" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:09.875Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120000" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120001.json b/data/2026/120xxx/CVE-2026-120001.json new file mode 100644 index 0000000000..f48a5bb198 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120001.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120001", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:10.436Z", + "dateUpdated": "2026-11-10T18:25:10.436Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:10.436Z" + }, + "references": [ + { + "name": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120001" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120002.json b/data/2026/120xxx/CVE-2026-120002.json new file mode 100644 index 0000000000..17c81ff595 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120002.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120002", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.877Z", + "datePublished": "2026-11-10T18:25:10.949Z", + "dateUpdated": "2026-11-10T18:25:10.949Z" + }, + "containers": { + "cna": { + "title": "Microsoft SharePoint Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:10.949Z" + }, + "references": [ + { + "name": "Microsoft SharePoint Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120002" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120003.json b/data/2026/120xxx/CVE-2026-120003.json new file mode 100644 index 0000000000..9c481c330a --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120003.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120003", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.878Z", + "datePublished": "2026-11-10T18:25:11.542Z", + "dateUpdated": "2026-11-10T18:25:11.542Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:25:11.542Z" + }, + "references": [ + { + "name": "Microsoft Office Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120003" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120005.json b/data/2026/120xxx/CVE-2026-120005.json new file mode 100644 index 0000000000..bbbf23518a --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120005.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120005", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.878Z", + "datePublished": "2026-11-10T18:22:06.994Z", + "dateUpdated": "2026-11-10T18:22:06.994Z" + }, + "containers": { + "cna": { + "title": "Microsoft PowerPoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.20974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21056" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.20974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21056", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:06.994Z" + }, + "references": [ + { + "name": "Microsoft PowerPoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120005" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120006.json b/data/2026/120xxx/CVE-2026-120006.json new file mode 100644 index 0000000000..ed4988d47c --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120006.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120006", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-10-30T17:58:13.878Z", + "datePublished": "2026-11-10T18:21:40.427Z", + "dateUpdated": "2026-11-10T18:21:40.427Z" + }, + "containers": { + "cna": { + "title": "Aspire Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:aspire.hosting.apphost:*:*:*:*:*:*:*:*", + "versionStartIncluding": "13.6.4", + "versionEndExcluding": "13.6.5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:aspire.hosting:*:*:*:*:*:*:*:*", + "versionStartIncluding": "13.6.4", + "versionEndExcluding": "13.6.5" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Aspire.Hosting", + "versions": [ + { + "version": "13.6.4", + "lessThan": "13.6.5", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Aspire.Hosting.AppHost", + "versions": [ + { + "version": "13.6.4", + "lessThan": "13.6.5", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-201: Insertion of Sensitive Information Into Sent Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-201" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:40.427Z" + }, + "references": [ + { + "name": "Aspire Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120006" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120778.json b/data/2026/120xxx/CVE-2026-120778.json new file mode 100644 index 0000000000..ec875cc93a --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120778.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120778", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.892Z", + "datePublished": "2026-11-10T18:23:52.929Z", + "dateUpdated": "2026-11-10T18:23:52.929Z" + }, + "containers": { + "cna": { + "title": "Aspire Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:aspire.cli:*:*:*:*:*:*:*:*", + "versionStartIncluding": "13.5.4", + "versionEndExcluding": "13.6.5" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Aspire.Cli", + "platforms": [ + "Linux", + "Mac OS" + ], + "versions": [ + { + "version": "13.5.4", + "lessThan": "13.6.5", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-379: Creation of Temporary File in Directory with Insecure Permissions", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-379" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:52.929Z" + }, + "references": [ + { + "name": "Aspire Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120778" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120779.json b/data/2026/120xxx/CVE-2026-120779.json new file mode 100644 index 0000000000..320d07051a --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120779.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120779", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.892Z", + "datePublished": "2026-11-10T18:21:55.640Z", + "dateUpdated": "2026-11-10T18:21:55.640Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:55.640Z" + }, + "references": [ + { + "name": "Visual Studio Code Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120779" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.6, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120780.json b/data/2026/120xxx/CVE-2026-120780.json new file mode 100644 index 0000000000..057dd994c1 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120780.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120780", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.892Z", + "datePublished": "2026-11-10T18:21:56.148Z", + "dateUpdated": "2026-11-10T18:21:56.148Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-284: Improper Access Control", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-284" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:56.148Z" + }, + "references": [ + { + "name": "Visual Studio Code Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120780" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120782.json b/data/2026/120xxx/CVE-2026-120782.json new file mode 100644 index 0000000000..51183e99bf --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120782.json @@ -0,0 +1,107 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120782", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.892Z", + "datePublished": "2026-11-10T18:21:41.006Z", + "dateUpdated": "2026-11-10T18:21:41.006Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + }, + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:41.006Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120782" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120783.json b/data/2026/120xxx/CVE-2026-120783.json new file mode 100644 index 0000000000..251672f492 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120783.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120783", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.892Z", + "datePublished": "2026-11-10T18:22:07.509Z", + "dateUpdated": "2026-11-10T18:22:07.509Z" + }, + "containers": { + "cna": { + "title": "Azure DevOps Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_devops_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "20260304.1" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure DevOps Server 2025", + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "20260304.1", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:07.509Z" + }, + "references": [ + { + "name": "Azure DevOps Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120783" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120785.json b/data/2026/120xxx/CVE-2026-120785.json new file mode 100644 index 0000000000..228addb389 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120785.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120785", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.892Z", + "datePublished": "2026-11-10T18:22:07.951Z", + "dateUpdated": "2026-11-10T18:22:07.951Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:07.951Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120785" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120786.json b/data/2026/120xxx/CVE-2026-120786.json new file mode 100644 index 0000000000..d706755bc4 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120786.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120786", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.892Z", + "datePublished": "2026-11-10T18:22:08.406Z", + "dateUpdated": "2026-11-10T18:22:08.406Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:08.406Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120786" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120788.json b/data/2026/120xxx/CVE-2026-120788.json new file mode 100644 index 0000000000..c40f7a3106 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120788.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120788", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.893Z", + "datePublished": "2026-11-10T18:22:09.010Z", + "dateUpdated": "2026-11-10T18:22:09.010Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:09.010Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120788" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120789.json b/data/2026/120xxx/CVE-2026-120789.json new file mode 100644 index 0000000000..3b9dc0bf90 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120789.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120789", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.893Z", + "datePublished": "2026-11-10T18:22:09.553Z", + "dateUpdated": "2026-11-10T18:22:09.553Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:09.553Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120789" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120790.json b/data/2026/120xxx/CVE-2026-120790.json new file mode 100644 index 0000000000..e122df217e --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120790.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120790", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.893Z", + "datePublished": "2026-11-10T18:22:10.084Z", + "dateUpdated": "2026-11-10T18:22:10.084Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:10.084Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120790" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120791.json b/data/2026/120xxx/CVE-2026-120791.json new file mode 100644 index 0000000000..e1f6e99eb1 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120791.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120791", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.893Z", + "datePublished": "2026-11-10T18:22:10.697Z", + "dateUpdated": "2026-11-10T18:22:10.697Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:10.697Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120791" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120792.json b/data/2026/120xxx/CVE-2026-120792.json new file mode 100644 index 0000000000..d3c5036a8d --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120792.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120792", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.893Z", + "datePublished": "2026-11-10T18:21:57.285Z", + "dateUpdated": "2026-11-10T18:21:57.285Z" + }, + "containers": { + "cna": { + "title": "Aspire Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:aspire.cli:*:*:*:*:*:*:*:*", + "versionStartIncluding": "13.5.4", + "versionEndExcluding": "13.6.5" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Aspire.Cli", + "platforms": [ + "Linux", + "Mac OS" + ], + "versions": [ + { + "version": "13.5.4", + "lessThan": "13.6.5", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-532: Insertion of Sensitive Information into Log File", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-532" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:57.285Z" + }, + "references": [ + { + "name": "Aspire Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.3, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/120xxx/CVE-2026-120796.json b/data/2026/120xxx/CVE-2026-120796.json new file mode 100644 index 0000000000..3b5adaeae6 --- /dev/null +++ b/data/2026/120xxx/CVE-2026-120796.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-120796", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-02T22:42:10.893Z", + "datePublished": "2026-11-10T18:23:53.968Z", + "dateUpdated": "2026-11-10T18:23:53.968Z" + }, + "containers": { + "cna": { + "title": ".NET Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", + "versionStartIncluding": "11.0.0-preview.1", + "versionEndExcluding": "11.0.0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:system.text.json:*:*:*:*:*:*:*:*", + "versionStartIncluding": "NOT_YET_AVAILABLE", + "versionEndExcluding": "11.0.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Linux", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Mac OS", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": ".NET 11.0 installed on Windows", + "versions": [ + { + "version": "11.0.0-preview.1", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "System.Text.Json", + "versions": [ + { + "version": "NOT_YET_AVAILABLE", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-407: Inefficient Algorithmic Complexity", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-407" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:53.968Z" + }, + "references": [ + { + "name": ".NET Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120796" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121611.json b/data/2026/121xxx/CVE-2026-121611.json index b24c562948..06812c59a1 100644 --- a/data/2026/121xxx/CVE-2026-121611.json +++ b/data/2026/121xxx/CVE-2026-121611.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-11-03T16:32:50.045Z", "datePublished": "2026-11-09T13:01:00.326Z", - "dateUpdated": "2026-11-09T13:01:00.326Z" + "dateUpdated": "2026-11-10T17:51:12.207Z" }, "containers": { "cna": { @@ -152,6 +152,40 @@ "x_generator": { "engine": "cvelib 1.8.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:47.360220Z", + "id": "CVE-2026-121611", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:51:12.207Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121660.json b/data/2026/121xxx/CVE-2026-121660.json new file mode 100644 index 0000000000..4184b8b391 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121660.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121660", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:23:54.479Z", + "dateUpdated": "2026-11-10T18:23:54.479Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-184: Incomplete List of Disallowed Inputs", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-184" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:54.479Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121660" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121661.json b/data/2026/121xxx/CVE-2026-121661.json new file mode 100644 index 0000000000..4cfbb2bf10 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121661.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121661", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:23:54.932Z", + "dateUpdated": "2026-11-10T18:23:54.932Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-184: Incomplete List of Disallowed Inputs", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-184" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:54.932Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121661" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121662.json b/data/2026/121xxx/CVE-2026-121662.json new file mode 100644 index 0000000000..d9d8825aa2 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121662.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121662", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:23:55.463Z", + "dateUpdated": "2026-11-10T18:23:55.463Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-77" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:55.463Z" + }, + "references": [ + { + "name": "Visual Studio Code Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121662" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.6, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121663.json b/data/2026/121xxx/CVE-2026-121663.json new file mode 100644 index 0000000000..ef32631270 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121663.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121663", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:23:55.977Z", + "dateUpdated": "2026-11-10T18:23:55.977Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-184: Incomplete List of Disallowed Inputs", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-184" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:55.977Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121663" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121664.json b/data/2026/121xxx/CVE-2026-121664.json new file mode 100644 index 0000000000..50cd3ee996 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121664.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121664", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:23:56.584Z", + "dateUpdated": "2026-11-10T18:23:56.584Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:56.584Z" + }, + "references": [ + { + "name": "Visual Studio Code Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121664" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121665.json b/data/2026/121xxx/CVE-2026-121665.json new file mode 100644 index 0000000000..a48d17ac11 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121665.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121665", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:21:57.865Z", + "dateUpdated": "2026-11-10T18:21:57.865Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Trust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-501: Trust Boundary Violation", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-501" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:57.865Z" + }, + "references": [ + { + "name": "Visual Studio Code Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121665" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121668.json b/data/2026/121xxx/CVE-2026-121668.json new file mode 100644 index 0000000000..01c62891fb --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121668.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121668", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:21:58.378Z", + "dateUpdated": "2026-11-10T18:21:58.378Z" + }, + "containers": { + "cna": { + "title": "Azure Confidential Clean Rooms Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_confidential_clean_room:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "11.0.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure Confidential Clean Room", + "platforms": [ + "Azure" + ], + "versions": [ + { + "version": "1.0.0", + "lessThan": "11.0.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:58.378Z" + }, + "references": [ + { + "name": "Azure Confidential Clean Rooms Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121668" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.7, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121669.json b/data/2026/121xxx/CVE-2026-121669.json new file mode 100644 index 0000000000..ea935e7d28 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121669.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121669", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:23:57.099Z", + "dateUpdated": "2026-11-10T18:23:57.099Z" + }, + "containers": { + "cna": { + "title": "PowerShell Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*", + "versionStartIncluding": "7.6.0", + "versionEndExcluding": "7.6.10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:powershell_7.7:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "7.7.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "PowerShell 7.6", + "versions": [ + { + "version": "7.6.0", + "lessThan": "7.6.10", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "PowerShell 7.7", + "versions": [ + { + "version": "1.0.0", + "lessThan": "7.7.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Insufficiently protected credentials in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-522: Insufficiently Protected Credentials", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-522" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:57.099Z" + }, + "references": [ + { + "name": "PowerShell Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121669" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121670.json b/data/2026/121xxx/CVE-2026-121670.json new file mode 100644 index 0000000000..a35b537256 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121670.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121670", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.480Z", + "datePublished": "2026-11-10T18:23:57.697Z", + "dateUpdated": "2026-11-10T18:23:57.697Z" + }, + "containers": { + "cna": { + "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:57.697Z" + }, + "references": [ + { + "name": "Windows Overlay Filter Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121670" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121671.json b/data/2026/121xxx/CVE-2026-121671.json new file mode 100644 index 0000000000..4d2efbc188 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121671.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121671", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.481Z", + "datePublished": "2026-11-10T18:23:58.306Z", + "dateUpdated": "2026-11-10T18:23:58.306Z" + }, + "containers": { + "cna": { + "title": "Windows Audio Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:58.306Z" + }, + "references": [ + { + "name": "Windows Audio Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121671" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121673.json b/data/2026/121xxx/CVE-2026-121673.json new file mode 100644 index 0000000000..457b70f848 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121673.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121673", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.481Z", + "datePublished": "2026-11-10T18:23:58.746Z", + "dateUpdated": "2026-11-10T18:23:58.746Z" + }, + "containers": { + "cna": { + "title": "Windows Filter Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:58.746Z" + }, + "references": [ + { + "name": "Windows Filter Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121673" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121674.json b/data/2026/121xxx/CVE-2026-121674.json new file mode 100644 index 0000000000..6022813ef0 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121674.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121674", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.481Z", + "datePublished": "2026-11-10T18:23:59.253Z", + "dateUpdated": "2026-11-10T18:23:59.253Z" + }, + "containers": { + "cna": { + "title": "PowerShell Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*", + "versionStartIncluding": "7.6.0", + "versionEndExcluding": "7.6.10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:powershell_7.7:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "7.7.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "PowerShell 7.6", + "versions": [ + { + "version": "7.6.0", + "lessThan": "7.6.10", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "PowerShell 7.7", + "versions": [ + { + "version": "1.0.0", + "lessThan": "7.7.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Insertion of sensitive information into sent data in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-201: Insertion of Sensitive Information Into Sent Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-201" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:59.253Z" + }, + "references": [ + { + "name": "PowerShell Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121674" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121675.json b/data/2026/121xxx/CVE-2026-121675.json new file mode 100644 index 0000000000..7c0e8d24ef --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121675.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121675", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.481Z", + "datePublished": "2026-11-10T18:23:59.769Z", + "dateUpdated": "2026-11-10T18:23:59.769Z" + }, + "containers": { + "cna": { + "title": "PowerShell Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*", + "versionStartIncluding": "7.6.0", + "versionEndExcluding": "7.6.10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:powershell_7.7:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "7.7.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "PowerShell 7.6", + "versions": [ + { + "version": "7.6.0", + "lessThan": "7.6.10", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "PowerShell 7.7", + "versions": [ + { + "version": "1.0.0", + "lessThan": "7.7.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-522: Insufficiently Protected Credentials", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-522" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:23:59.769Z" + }, + "references": [ + { + "name": "PowerShell Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121675" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121677.json b/data/2026/121xxx/CVE-2026-121677.json new file mode 100644 index 0000000000..80ffd137d6 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121677.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121677", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.481Z", + "datePublished": "2026-11-10T18:24:00.215Z", + "dateUpdated": "2026-11-10T18:24:00.215Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_app_client_for_windows_desktop:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "1.00", + "versionEndExcluding": "2.0.1489.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows App Client for Windows Desktop", + "versions": [ + { + "version": "1.00", + "lessThan": "2.0.1489.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:00.215Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121677" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121678.json b/data/2026/121xxx/CVE-2026-121678.json new file mode 100644 index 0000000000..03a444cd68 --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121678.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121678", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.481Z", + "datePublished": "2026-11-10T18:24:00.816Z", + "dateUpdated": "2026-11-10T18:24:00.816Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_app_client_for_windows_desktop:*:*:*:*:*:windows:*:*", + "versionStartIncluding": "1.00", + "versionEndExcluding": "2.0.1489.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows App Client for Windows Desktop", + "versions": [ + { + "version": "1.00", + "lessThan": "2.0.1489.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:00.816Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121678" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121680.json b/data/2026/121xxx/CVE-2026-121680.json new file mode 100644 index 0000000000..dc8b09b66c --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121680.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121680", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.481Z", + "datePublished": "2026-11-10T18:24:01.333Z", + "dateUpdated": "2026-11-10T18:24:01.333Z" + }, + "containers": { + "cna": { + "title": "Windows NTLM Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-522: Insufficiently Protected Credentials", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-522" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:01.333Z" + }, + "references": [ + { + "name": "Windows NTLM Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121680" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/121xxx/CVE-2026-121681.json b/data/2026/121xxx/CVE-2026-121681.json new file mode 100644 index 0000000000..773d58882c --- /dev/null +++ b/data/2026/121xxx/CVE-2026-121681.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-121681", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-03T18:52:08.481Z", + "datePublished": "2026-11-10T18:24:01.860Z", + "dateUpdated": "2026-11-10T18:24:01.860Z" + }, + "containers": { + "cna": { + "title": "Microsoft Trace Data Helper Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:01.860Z" + }, + "references": [ + { + "name": "Microsoft Trace Data Helper Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121681" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122113.json b/data/2026/122xxx/CVE-2026-122113.json index 0c09773826..d1b282949c 100644 --- a/data/2026/122xxx/CVE-2026-122113.json +++ b/data/2026/122xxx/CVE-2026-122113.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-11-04T17:36:59.444Z", "datePublished": "2026-11-06T18:36:59.863Z", - "dateUpdated": "2026-11-06T18:36:59.863Z" + "dateUpdated": "2026-11-10T18:21:47.077Z" }, "containers": { "cna": { @@ -59,6 +59,68 @@ "shortName": "certcc", "dateUpdated": "2026-11-06T18:36:59.863Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-674", + "lang": "en", + "description": "CWE-674 Uncontrolled Recursion" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 4.3, + "attackVector": "PHYSICAL", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:21:02.904599Z", + "id": "CVE-2026-122113", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:21:47.077Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122146.json b/data/2026/122xxx/CVE-2026-122146.json index 8f978bacff..9311b74385 100644 --- a/data/2026/122xxx/CVE-2026-122146.json +++ b/data/2026/122xxx/CVE-2026-122146.json @@ -8,24 +8,34 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-04T18:21:49.726Z", "datePublished": "2026-11-05T00:45:26.038Z", - "dateUpdated": "2026-11-05T20:32:08.969Z" + "dateUpdated": "2026-11-10T18:07:28.974Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", - "dateUpdated": "2026-11-05T00:45:26.038Z" + "dateUpdated": "2026-11-10T18:07:28.974Z" }, - "title": "101arrowz fflate index.mjs unzipSync memory corruption", + "title": "101arrowz fflate index.mjs unzipSync memory allocation", "problemTypes": [ { "descriptions": [ { "type": "CWE", - "cweId": "CWE-119", + "cweId": "CWE-789", "lang": "en", - "description": "Memory Corruption" + "description": "Uncontrolled Memory Allocation" + } + ] + }, + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-400", + "lang": "en", + "description": "Resource Consumption" } ] } @@ -60,7 +70,7 @@ "descriptions": [ { "lang": "en", - "value": "A weakness has been identified in 101arrowz fflate up to 0.8.3. This issue affects the function unzipSync of the file esm/index.mjs. This manipulation causes memory corruption. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way." + "value": "A weakness has been identified in 101arrowz fflate up to 0.8.3. This issue affects the function unzipSync of the file esm/index.mjs. This manipulation causes uncontrolled memory allocation. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. It is suggested to update the configuration settings. The maintainer disputes this issue as a vulnerability. The library is a pure JavaScript decompressor that allocates memory proportional to the decompressed payload size, which is expected behavior. Excessive allocations simply throw a standard JavaScript RangeError or reach engine heap limits. Furthermore, because a low-level decompression library cannot distinguish between a maliciously crafted compression bomb and a legitimate file with a high compression ratio, the API explicitly provides a filter option allowing callers to restrict decompressed file sizes and prevent denial-of-service according to their application's requirements, as seen both in the documentation and noted in the reported issue." } ], "metrics": [ @@ -68,31 +78,31 @@ "cvssV4_0": { "version": "4.0", "baseScore": 6.9, - "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM" } }, { "cvssV3_1": { "version": "3.1", - "baseScore": 7.3, - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", - "baseSeverity": "HIGH" + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:W/RC:C", + "baseSeverity": "MEDIUM" } }, { "cvssV3_0": { "version": "3.0", - "baseScore": 7.3, - "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C", - "baseSeverity": "HIGH" + "baseScore": 5.3, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:W/RC:C", + "baseSeverity": "MEDIUM" } }, { "cvssV2_0": { "version": "2.0", - "baseScore": 7.5, - "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C" + "baseScore": 5, + "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:W/RC:C" } } ], @@ -108,7 +118,7 @@ "value": "VulDB entry created" }, { - "time": "2026-11-04T19:26:54.000Z", + "time": "2026-11-10T19:12:21.000Z", "lang": "en", "value": "VulDB entry last update" } @@ -128,7 +138,7 @@ "references": [ { "url": "https://vuldb.com/vuln/431150", - "name": "VDB-431150 | 101arrowz fflate index.mjs unzipSync memory corruption", + "name": "VDB-431150 | 101arrowz fflate index.mjs unzipSync memory allocation", "tags": [ "vdb-entry", "technical-description" @@ -162,6 +172,18 @@ "exploit", "issue-tracking" ] + }, + { + "url": "https://github.com/101arrowz/fflate/blob/master/README.md", + "tags": [ + "related" + ] + }, + { + "url": "https://github.com/101arrowz/fflate/", + "tags": [ + "product" + ] } ], "x_generator": [ diff --git a/data/2026/122xxx/CVE-2026-122162.json b/data/2026/122xxx/CVE-2026-122162.json new file mode 100644 index 0000000000..0085452d7b --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122162.json @@ -0,0 +1,219 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122162", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.304Z", + "datePublished": "2026-11-10T18:24:02.386Z", + "dateUpdated": "2026-11-10T18:24:02.386Z" + }, + "containers": { + "cna": { + "title": "Windows Update Stack Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + }, + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:02.386Z" + }, + "references": [ + { + "name": "Windows Update Stack Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122162" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122163.json b/data/2026/122xxx/CVE-2026-122163.json new file mode 100644 index 0000000000..8e7e163c86 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122163.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122163", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.304Z", + "datePublished": "2026-11-10T18:24:02.911Z", + "dateUpdated": "2026-11-10T18:24:02.911Z" + }, + "containers": { + "cna": { + "title": "Windows Image Acquisition Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:02.911Z" + }, + "references": [ + { + "name": "Windows Image Acquisition Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122163" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122164.json b/data/2026/122xxx/CVE-2026-122164.json new file mode 100644 index 0000000000..6799da7cc7 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122164.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122164", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.304Z", + "datePublished": "2026-11-10T18:24:03.492Z", + "dateUpdated": "2026-11-10T18:24:03.492Z" + }, + "containers": { + "cna": { + "title": "Windows Kerberos Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:03.492Z" + }, + "references": [ + { + "name": "Windows Kerberos Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122164" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122165.json b/data/2026/122xxx/CVE-2026-122165.json new file mode 100644 index 0000000000..5710e5cbc3 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122165.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122165", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.304Z", + "datePublished": "2026-11-10T18:24:04.043Z", + "dateUpdated": "2026-11-10T18:24:04.043Z" + }, + "containers": { + "cna": { + "title": "Windows Client for NFS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:04.043Z" + }, + "references": [ + { + "name": "Windows Client for NFS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122165" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122166.json b/data/2026/122xxx/CVE-2026-122166.json new file mode 100644 index 0000000000..934bfb8799 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122166.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122166", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.304Z", + "datePublished": "2026-11-10T18:24:04.583Z", + "dateUpdated": "2026-11-10T18:24:04.583Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Services Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:04.583Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Services Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122166" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122167.json b/data/2026/122xxx/CVE-2026-122167.json new file mode 100644 index 0000000000..e72a85a800 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122167.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122167", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.304Z", + "datePublished": "2026-11-10T18:24:05.039Z", + "dateUpdated": "2026-11-10T18:24:05.039Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:05.039Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122167" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122168.json b/data/2026/122xxx/CVE-2026-122168.json new file mode 100644 index 0000000000..a3378601a1 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122168.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122168", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.304Z", + "datePublished": "2026-11-10T18:24:05.590Z", + "dateUpdated": "2026-11-10T18:24:05.590Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows Media Foundation Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:05.590Z" + }, + "references": [ + { + "name": "Microsoft Windows Media Foundation Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122168" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122169.json b/data/2026/122xxx/CVE-2026-122169.json new file mode 100644 index 0000000000..94f4a4ddbc --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122169.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122169", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:06.041Z", + "dateUpdated": "2026-11-10T18:24:06.041Z" + }, + "containers": { + "cna": { + "title": "Windows IKE Extension Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1220: Insufficient Granularity of Access Control", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1220" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:06.041Z" + }, + "references": [ + { + "name": "Windows IKE Extension Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122169" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122170.json b/data/2026/122xxx/CVE-2026-122170.json new file mode 100644 index 0000000000..cbf32f72e4 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122170.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122170", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:06.627Z", + "dateUpdated": "2026-11-10T18:24:06.627Z" + }, + "containers": { + "cna": { + "title": "Windows Win32k Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:06.627Z" + }, + "references": [ + { + "name": "Windows Win32k Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122170" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122171.json b/data/2026/122xxx/CVE-2026-122171.json new file mode 100644 index 0000000000..c63810f746 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122171.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122171", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:07.351Z", + "dateUpdated": "2026-11-10T18:24:07.351Z" + }, + "containers": { + "cna": { + "title": "Microsoft XPS Document Converter Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:07.351Z" + }, + "references": [ + { + "name": "Microsoft XPS Document Converter Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122171" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122172.json b/data/2026/122xxx/CVE-2026-122172.json new file mode 100644 index 0000000000..42d300d67e --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122172.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122172", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:07.959Z", + "dateUpdated": "2026-11-10T18:24:07.959Z" + }, + "containers": { + "cna": { + "title": "Microsoft Trace Data Helper Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:07.959Z" + }, + "references": [ + { + "name": "Microsoft Trace Data Helper Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122172" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122173.json b/data/2026/122xxx/CVE-2026-122173.json new file mode 100644 index 0000000000..78a1ce0702 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122173.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122173", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:08.570Z", + "dateUpdated": "2026-11-10T18:24:08.570Z" + }, + "containers": { + "cna": { + "title": "HID Parser Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:08.570Z" + }, + "references": [ + { + "name": "HID Parser Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122173" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122174.json b/data/2026/122xxx/CVE-2026-122174.json new file mode 100644 index 0000000000..a82ff1b72c --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122174.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122174", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:09.239Z", + "dateUpdated": "2026-11-10T18:24:09.239Z" + }, + "containers": { + "cna": { + "title": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:09.239Z" + }, + "references": [ + { + "name": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122174" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122175.json b/data/2026/122xxx/CVE-2026-122175.json new file mode 100644 index 0000000000..cf6fd855db --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122175.json @@ -0,0 +1,105 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122175", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:09.797Z", + "dateUpdated": "2026-11-10T18:24:09.797Z" + }, + "containers": { + "cna": { + "title": "Windows Autopilot Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:09.797Z" + }, + "references": [ + { + "name": "Windows Autopilot Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122175" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122176.json b/data/2026/122xxx/CVE-2026-122176.json new file mode 100644 index 0000000000..050badc1d0 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122176.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122176", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:10.384Z", + "dateUpdated": "2026-11-10T18:24:10.384Z" + }, + "containers": { + "cna": { + "title": "Windows SMB Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows SMB allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:10.384Z" + }, + "references": [ + { + "name": "Windows SMB Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122176" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122177.json b/data/2026/122xxx/CVE-2026-122177.json new file mode 100644 index 0000000000..801d72b1c7 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122177.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122177", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:10.890Z", + "dateUpdated": "2026-11-10T18:24:10.890Z" + }, + "containers": { + "cna": { + "title": "Windows iSCSI Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:10.890Z" + }, + "references": [ + { + "name": "Windows iSCSI Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122177" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122179.json b/data/2026/122xxx/CVE-2026-122179.json new file mode 100644 index 0000000000..1eb3cdf55d --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122179.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122179", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.305Z", + "datePublished": "2026-11-10T18:24:11.475Z", + "dateUpdated": "2026-11-10T18:24:11.475Z" + }, + "containers": { + "cna": { + "title": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:11.475Z" + }, + "references": [ + { + "name": "Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122179" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122182.json b/data/2026/122xxx/CVE-2026-122182.json new file mode 100644 index 0000000000..c6f74f9b79 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122182.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122182", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.306Z", + "datePublished": "2026-11-10T18:24:11.942Z", + "dateUpdated": "2026-11-10T18:24:11.942Z" + }, + "containers": { + "cna": { + "title": "Windows Maps Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:11.942Z" + }, + "references": [ + { + "name": "Windows Maps Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122182" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122183.json b/data/2026/122xxx/CVE-2026-122183.json new file mode 100644 index 0000000000..ad86df64e3 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122183.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122183", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T19:07:32.306Z", + "datePublished": "2026-11-10T18:24:12.437Z", + "dateUpdated": "2026-11-10T18:24:12.437Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:12.437Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122183" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122194.json b/data/2026/122xxx/CVE-2026-122194.json new file mode 100644 index 0000000000..c05a867d0e --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122194.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122194", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T20:00:16.385Z", + "datePublished": "2026-11-10T18:21:58.966Z", + "dateUpdated": "2026-11-10T18:21:58.966Z" + }, + "containers": { + "cna": { + "title": "Microsoft Defender Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:malware_protection_engine:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.1.0.0", + "versionEndExcluding": "1.1.26100.4" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Malware Protection Engine", + "versions": [ + { + "version": "1.1.0.0", + "lessThan": "1.1.26100.4", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:58.966Z" + }, + "references": [ + { + "name": "Microsoft Defender Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122194" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122196.json b/data/2026/122xxx/CVE-2026-122196.json new file mode 100644 index 0000000000..0fb3d53807 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122196.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122196", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T20:00:16.385Z", + "datePublished": "2026-11-10T18:20:38.777Z", + "dateUpdated": "2026-11-10T18:20:38.777Z" + }, + "containers": { + "cna": { + "title": "Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:power-apps:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1710 (9.2.23071.136)", + "versionEndExcluding": "publication" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Power Apps", + "platforms": [ + "Dynamics CRM" + ], + "versions": [ + { + "version": "1710 (9.2.23071.136)", + "lessThan": "publication", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper restriction of xml external entity reference in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-611: Improper Restriction of XML External Entity Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-611" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:38.777Z" + }, + "references": [ + { + "name": "Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122196" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122198.json b/data/2026/122xxx/CVE-2026-122198.json new file mode 100644 index 0000000000..2431e7552d --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122198.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122198", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T20:00:16.385Z", + "datePublished": "2026-11-10T18:20:39.218Z", + "dateUpdated": "2026-11-10T18:20:39.218Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:39.218Z" + }, + "references": [ + { + "name": "Microsoft Office Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122198" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122297.json b/data/2026/122xxx/CVE-2026-122297.json new file mode 100644 index 0000000000..5b30a4130a --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122297.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122297", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-04T22:20:30.312Z", + "datePublished": "2026-11-10T18:24:12.934Z", + "dateUpdated": "2026-11-10T18:24:12.934Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Transaction Manager Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:12.934Z" + }, + "references": [ + { + "name": "Windows Kernel Transaction Manager Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122297" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122474.json b/data/2026/122xxx/CVE-2026-122474.json new file mode 100644 index 0000000000..7b3a18bb23 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122474.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122474", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:04:16.766Z", + "datePublished": "2026-11-10T18:24:13.472Z", + "dateUpdated": "2026-11-10T18:24:13.472Z" + }, + "containers": { + "cna": { + "title": "Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:13.472Z" + }, + "references": [ + { + "name": "Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122474" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122475.json b/data/2026/122xxx/CVE-2026-122475.json new file mode 100644 index 0000000000..6f1032ae2c --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122475.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122475", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:04:16.767Z", + "datePublished": "2026-11-10T18:24:14.109Z", + "dateUpdated": "2026-11-10T18:24:14.109Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Spaces Controller Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:24:14.109Z" + }, + "references": [ + { + "name": "Windows Storage Spaces Controller Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122475" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122518.json b/data/2026/122xxx/CVE-2026-122518.json new file mode 100644 index 0000000000..3a25fd71d8 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122518.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122518", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:09:11.328Z", + "datePublished": "2026-11-10T18:21:59.563Z", + "dateUpdated": "2026-11-10T18:21:59.563Z" + }, + "containers": { + "cna": { + "title": "Microsoft Edge (Chromium-based) Information Disclosure Vulnerability", + "datePublic": "2026-11-04T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "156.0.4314.42" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Edge (Chromium-based)", + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "156.0.4314.42", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:59.563Z" + }, + "references": [ + { + "name": "Microsoft Edge (Chromium-based) Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122518" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122979.json b/data/2026/122xxx/CVE-2026-122979.json new file mode 100644 index 0000000000..6f9d9ac08c --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122979.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122979", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:51:41.906Z", + "datePublished": "2026-11-10T18:20:40.850Z", + "dateUpdated": "2026-11-10T18:20:40.850Z" + }, + "containers": { + "cna": { + "title": "Microsoft Teams for Android Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1416/1.0.0.2026173602" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Teams for Android", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1416/1.0.0.2026173602", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:40.850Z" + }, + "references": [ + { + "name": "Microsoft Teams for Android Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122979" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122984.json b/data/2026/122xxx/CVE-2026-122984.json new file mode 100644 index 0000000000..9249018a45 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122984.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122984", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:51:41.907Z", + "datePublished": "2026-11-10T18:21:42.214Z", + "dateUpdated": "2026-11-10T18:21:42.214Z" + }, + "containers": { + "cna": { + "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:42.214Z" + }, + "references": [ + { + "name": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122984" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122985.json b/data/2026/122xxx/CVE-2026-122985.json new file mode 100644 index 0000000000..c1b88556e9 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122985.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122985", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:51:41.907Z", + "datePublished": "2026-11-10T18:20:41.370Z", + "dateUpdated": "2026-11-10T18:20:41.370Z" + }, + "containers": { + "cna": { + "title": "Microsoft PowerShell Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*", + "versionStartIncluding": "7.6.0", + "versionEndExcluding": "7.6.10" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:powershell_7.7:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "7.7.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "PowerShell 7.6", + "versions": [ + { + "version": "7.6.0", + "lessThan": "7.6.10", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "PowerShell 7.7", + "versions": [ + { + "version": "1.0.0", + "lessThan": "7.7.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-611: Improper Restriction of XML External Entity Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-611" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:41.370Z" + }, + "references": [ + { + "name": "Microsoft PowerShell Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122985" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122986.json b/data/2026/122xxx/CVE-2026-122986.json new file mode 100644 index 0000000000..242185e694 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122986.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122986", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:51:41.907Z", + "datePublished": "2026-11-10T18:22:00.162Z", + "dateUpdated": "2026-11-10T18:22:00.162Z" + }, + "containers": { + "cna": { + "title": "Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:kernel-mshv-6.6.137.mshv2-2.azl3.x86_64:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "kernel-mshv-6.6.18.34.mshv3-2.azl3.x86_64" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "kernel-mshv-6.6.137.mshv2-2.azl3.x86_64", + "platforms": [ + "Azure Linux 3.0" + ], + "versions": [ + { + "version": "1.0.0", + "lessThan": "kernel-mshv-6.6.18.34.mshv3-2.azl3.x86_64", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-269: Improper Privilege Management", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-269" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:00.162Z" + }, + "references": [ + { + "name": "Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122986" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122987.json b/data/2026/122xxx/CVE-2026-122987.json new file mode 100644 index 0000000000..2b2f7a22da --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122987.json @@ -0,0 +1,119 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122987", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:51:41.907Z", + "datePublished": "2026-11-10T18:22:00.666Z", + "dateUpdated": "2026-11-10T18:22:00.666Z" + }, + "containers": { + "cna": { + "title": "Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_hpc_pack_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "6.3.8364" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_hpc_pack_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "publication" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft HPC Pack 2016", + "versions": [ + { + "version": "1.0.0", + "lessThan": "publication", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft HPC Pack 2019", + "versions": [ + { + "version": "1.0.0", + "lessThan": "6.3.8364", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:00.666Z" + }, + "references": [ + { + "name": "Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122987" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/122xxx/CVE-2026-122988.json b/data/2026/122xxx/CVE-2026-122988.json new file mode 100644 index 0000000000..14bf2b8e71 --- /dev/null +++ b/data/2026/122xxx/CVE-2026-122988.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-122988", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T00:51:41.907Z", + "datePublished": "2026-11-10T18:22:23.050Z", + "dateUpdated": "2026-11-10T18:22:23.050Z" + }, + "containers": { + "cna": { + "title": "Windows Admin Center Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_admin_center:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1809.0", + "versionEndExcluding": "2.1.36" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Admin Center", + "versions": [ + { + "version": "1809.0", + "lessThan": "2.1.36", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-78" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:23.050Z" + }, + "references": [ + { + "name": "Windows Admin Center Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122988" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123279.json b/data/2026/123xxx/CVE-2026-123279.json index a01d78f0ec..1dde483b5b 100644 --- a/data/2026/123xxx/CVE-2026-123279.json +++ b/data/2026/123xxx/CVE-2026-123279.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:12.992Z", "datePublished": "2026-11-06T10:27:47.709Z", - "dateUpdated": "2026-11-06T10:27:47.709Z" + "dateUpdated": "2026-11-10T18:31:10.124Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:51:29.920686Z", + "id": "CVE-2026-123279", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:31:10.124Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123280.json b/data/2026/123xxx/CVE-2026-123280.json index 7b3378b19d..0a8520d2b8 100644 --- a/data/2026/123xxx/CVE-2026-123280.json +++ b/data/2026/123xxx/CVE-2026-123280.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:13.426Z", "datePublished": "2026-11-06T10:27:48.227Z", - "dateUpdated": "2026-11-06T10:27:48.227Z" + "dateUpdated": "2026-11-10T18:32:35.760Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:31:49.186782Z", + "id": "CVE-2026-123280", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:32:35.760Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123281.json b/data/2026/123xxx/CVE-2026-123281.json index d91dceaca4..a2d8032a5a 100644 --- a/data/2026/123xxx/CVE-2026-123281.json +++ b/data/2026/123xxx/CVE-2026-123281.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:13.772Z", "datePublished": "2026-11-06T10:27:48.743Z", - "dateUpdated": "2026-11-06T10:27:48.743Z" + "dateUpdated": "2026-11-10T18:33:45.295Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:33:19.467467Z", + "id": "CVE-2026-123281", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:33:45.295Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123287.json b/data/2026/123xxx/CVE-2026-123287.json index fc27245155..1ae78d5144 100644 --- a/data/2026/123xxx/CVE-2026-123287.json +++ b/data/2026/123xxx/CVE-2026-123287.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:16.408Z", "datePublished": "2026-11-06T10:27:51.568Z", - "dateUpdated": "2026-11-06T10:27:51.568Z" + "dateUpdated": "2026-11-10T17:55:30.334Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:55:01.695636Z", + "id": "CVE-2026-123287", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:55:30.334Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123310.json b/data/2026/123xxx/CVE-2026-123310.json index 5e880e1d4d..ef4c6fd607 100644 --- a/data/2026/123xxx/CVE-2026-123310.json +++ b/data/2026/123xxx/CVE-2026-123310.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:23.891Z", "datePublished": "2026-11-06T10:28:01.553Z", - "dateUpdated": "2026-11-06T10:28:01.553Z" + "dateUpdated": "2026-11-10T17:54:25.381Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:54:04.257517Z", + "id": "CVE-2026-123310", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:54:25.381Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123312.json b/data/2026/123xxx/CVE-2026-123312.json index 41c5fc7648..cf611f9d30 100644 --- a/data/2026/123xxx/CVE-2026-123312.json +++ b/data/2026/123xxx/CVE-2026-123312.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:24.518Z", "datePublished": "2026-11-06T10:28:02.437Z", - "dateUpdated": "2026-11-06T10:28:02.437Z" + "dateUpdated": "2026-11-10T17:57:05.944Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:56:40.284754Z", + "id": "CVE-2026-123312", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:57:05.944Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123313.json b/data/2026/123xxx/CVE-2026-123313.json index 97dedd924f..3924abc8d3 100644 --- a/data/2026/123xxx/CVE-2026-123313.json +++ b/data/2026/123xxx/CVE-2026-123313.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:24.846Z", "datePublished": "2026-11-06T10:28:02.812Z", - "dateUpdated": "2026-11-06T10:28:02.812Z" + "dateUpdated": "2026-11-10T17:53:46.229Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:53:20.620268Z", + "id": "CVE-2026-123313", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:53:46.229Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123315.json b/data/2026/123xxx/CVE-2026-123315.json index b0b9542e86..a8864358d8 100644 --- a/data/2026/123xxx/CVE-2026-123315.json +++ b/data/2026/123xxx/CVE-2026-123315.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:25.531Z", "datePublished": "2026-11-06T10:28:03.621Z", - "dateUpdated": "2026-11-06T10:28:03.621Z" + "dateUpdated": "2026-11-10T17:52:54.868Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:52:38.694774Z", + "id": "CVE-2026-123315", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:52:54.868Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123318.json b/data/2026/123xxx/CVE-2026-123318.json index 45c64877c3..a82c423798 100644 --- a/data/2026/123xxx/CVE-2026-123318.json +++ b/data/2026/123xxx/CVE-2026-123318.json @@ -8,7 +8,7 @@ "assignerShortName": "JetBrains", "dateReserved": "2026-11-05T18:38:26.699Z", "datePublished": "2026-11-06T10:28:04.880Z", - "dateUpdated": "2026-11-06T10:28:04.880Z" + "dateUpdated": "2026-11-10T17:51:53.160Z" }, "containers": { "cna": { @@ -79,6 +79,40 @@ } } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T17:50:52.445589Z", + "id": "CVE-2026-123318", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:51:53.160Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123375.json b/data/2026/123xxx/CVE-2026-123375.json new file mode 100644 index 0000000000..d29ec60e06 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123375.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123375", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.805Z", + "datePublished": "2026-11-10T18:22:11.212Z", + "dateUpdated": "2026-11-10T18:22:11.212Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + }, + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:11.212Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123375" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123376.json b/data/2026/123xxx/CVE-2026-123376.json new file mode 100644 index 0000000000..66bfec5663 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123376.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123376", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.805Z", + "datePublished": "2026-11-10T18:22:11.751Z", + "dateUpdated": "2026-11-10T18:22:11.751Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:11.751Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123376" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123377.json b/data/2026/123xxx/CVE-2026-123377.json new file mode 100644 index 0000000000..4401c9d6d4 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123377.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123377", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.805Z", + "datePublished": "2026-11-10T18:22:12.328Z", + "dateUpdated": "2026-11-10T18:22:12.328Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:12.328Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123377" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123378.json b/data/2026/123xxx/CVE-2026-123378.json new file mode 100644 index 0000000000..8206a64076 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123378.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123378", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.805Z", + "datePublished": "2026-11-10T18:22:12.845Z", + "dateUpdated": "2026-11-10T18:22:12.845Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:12.845Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123378" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123379.json b/data/2026/123xxx/CVE-2026-123379.json new file mode 100644 index 0000000000..8cc7cfdb16 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123379.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123379", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:13.387Z", + "dateUpdated": "2026-11-10T18:22:13.387Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:13.387Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123379" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123380.json b/data/2026/123xxx/CVE-2026-123380.json new file mode 100644 index 0000000000..9c70d3f35d --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123380.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123380", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:13.978Z", + "dateUpdated": "2026-11-10T18:22:13.978Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:13.978Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123380" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123381.json b/data/2026/123xxx/CVE-2026-123381.json new file mode 100644 index 0000000000..42cfa3c8cc --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123381.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123381", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:14.495Z", + "dateUpdated": "2026-11-10T18:22:14.495Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + }, + { + "description": "CWE-681: Incorrect Conversion between Numeric Types", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-681" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:14.495Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123381" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123382.json b/data/2026/123xxx/CVE-2026-123382.json new file mode 100644 index 0000000000..fe5d6b7d40 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123382.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123382", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:14.964Z", + "dateUpdated": "2026-11-10T18:22:14.964Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:14.964Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123382" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123383.json b/data/2026/123xxx/CVE-2026-123383.json new file mode 100644 index 0000000000..fc8c8cbb5e --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123383.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123383", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:15.465Z", + "dateUpdated": "2026-11-10T18:22:15.465Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:15.465Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123383" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123384.json b/data/2026/123xxx/CVE-2026-123384.json new file mode 100644 index 0000000000..21af127587 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123384.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123384", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:15.997Z", + "dateUpdated": "2026-11-10T18:22:15.997Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:15.997Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123384" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123385.json b/data/2026/123xxx/CVE-2026-123385.json new file mode 100644 index 0000000000..b3de033607 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123385.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123385", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:16.548Z", + "dateUpdated": "2026-11-10T18:22:16.548Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:16.548Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123385" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123387.json b/data/2026/123xxx/CVE-2026-123387.json new file mode 100644 index 0000000000..af5ef1288c --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123387.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123387", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:20:42.347Z", + "dateUpdated": "2026-11-10T18:20:42.347Z" + }, + "containers": { + "cna": { + "title": "Active Directory Domain Services Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-77" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:42.347Z" + }, + "references": [ + { + "name": "Active Directory Domain Services Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123387" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123388.json b/data/2026/123xxx/CVE-2026-123388.json new file mode 100644 index 0000000000..e0ba1cdc06 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123388.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123388", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:20:43.083Z", + "dateUpdated": "2026-11-10T18:20:43.083Z" + }, + "containers": { + "cna": { + "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-170: Improper Null Termination", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-170" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:43.083Z" + }, + "references": [ + { + "name": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123388" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123389.json b/data/2026/123xxx/CVE-2026-123389.json new file mode 100644 index 0000000000..c14db2e248 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123389.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123389", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:20:43.655Z", + "dateUpdated": "2026-11-10T18:20:43.655Z" + }, + "containers": { + "cna": { + "title": "Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:43.655Z" + }, + "references": [ + { + "name": "Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123389" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123390.json b/data/2026/123xxx/CVE-2026-123390.json new file mode 100644 index 0000000000..70d75a354e --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123390.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123390", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:23.540Z", + "dateUpdated": "2026-11-10T18:22:23.540Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20136" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20136", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-502: Deserialization of Untrusted Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-502" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:23.540Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123390" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123391.json b/data/2026/123xxx/CVE-2026-123391.json new file mode 100644 index 0000000000..7ad134a00d --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123391.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123391", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.806Z", + "datePublished": "2026-11-10T18:22:24.125Z", + "dateUpdated": "2026-11-10T18:22:24.125Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20136" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20136", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:24.125Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123391" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123394.json b/data/2026/123xxx/CVE-2026-123394.json new file mode 100644 index 0000000000..5b619188c4 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123394.json @@ -0,0 +1,155 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123394", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.807Z", + "datePublished": "2026-11-10T18:22:17.086Z", + "dateUpdated": "2026-11-10T18:22:17.086Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:17.086Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123394" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123395.json b/data/2026/123xxx/CVE-2026-123395.json new file mode 100644 index 0000000000..3f002cf005 --- /dev/null +++ b/data/2026/123xxx/CVE-2026-123395.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-123395", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-05T21:53:37.807Z", + "datePublished": "2026-11-10T18:22:17.553Z", + "dateUpdated": "2026-11-10T18:22:17.553Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:17.553Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-123395" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123493.json b/data/2026/123xxx/CVE-2026-123493.json index 4839e04560..8cf229e288 100644 --- a/data/2026/123xxx/CVE-2026-123493.json +++ b/data/2026/123xxx/CVE-2026-123493.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:44:37.659Z", "datePublished": "2026-11-08T01:37:12.159Z", - "dateUpdated": "2026-11-08T01:37:12.159Z" + "dateUpdated": "2026-11-10T18:00:36.650Z" }, "containers": { "cna": { @@ -148,6 +148,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:29.683413Z", + "id": "CVE-2026-123493", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:00:36.650Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123497.json b/data/2026/123xxx/CVE-2026-123497.json index 2115e8fba8..c8a80a0346 100644 --- a/data/2026/123xxx/CVE-2026-123497.json +++ b/data/2026/123xxx/CVE-2026-123497.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:45:39.026Z", "datePublished": "2026-11-08T01:37:14.960Z", - "dateUpdated": "2026-11-08T01:37:14.960Z" + "dateUpdated": "2026-11-10T18:00:30.008Z" }, "containers": { "cna": { @@ -133,6 +133,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:25:54.247737Z", + "id": "CVE-2026-123497", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:00:30.008Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123501.json b/data/2026/123xxx/CVE-2026-123501.json index 71776524d2..21f906056c 100644 --- a/data/2026/123xxx/CVE-2026-123501.json +++ b/data/2026/123xxx/CVE-2026-123501.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:45:39.026Z", "datePublished": "2026-11-08T01:37:17.692Z", - "dateUpdated": "2026-11-08T01:37:17.692Z" + "dateUpdated": "2026-11-10T18:00:23.557Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:32.043146Z", + "id": "CVE-2026-123501", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:00:23.557Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123505.json b/data/2026/123xxx/CVE-2026-123505.json index 8802ed5026..ddf25285c6 100644 --- a/data/2026/123xxx/CVE-2026-123505.json +++ b/data/2026/123xxx/CVE-2026-123505.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:46:28.479Z", "datePublished": "2026-11-08T01:37:20.424Z", - "dateUpdated": "2026-11-08T01:37:20.424Z" + "dateUpdated": "2026-11-10T18:00:17.615Z" }, "containers": { "cna": { @@ -133,6 +133,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:34.465108Z", + "id": "CVE-2026-123505", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:00:17.615Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123509.json b/data/2026/123xxx/CVE-2026-123509.json index bec89723b9..a9212705ed 100644 --- a/data/2026/123xxx/CVE-2026-123509.json +++ b/data/2026/123xxx/CVE-2026-123509.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:46:28.480Z", "datePublished": "2026-11-08T01:37:23.158Z", - "dateUpdated": "2026-11-08T01:37:23.158Z" + "dateUpdated": "2026-11-10T18:00:10.959Z" }, "containers": { "cna": { @@ -133,6 +133,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:36.914952Z", + "id": "CVE-2026-123509", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:00:10.959Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123513.json b/data/2026/123xxx/CVE-2026-123513.json index a1d77de10b..d46c0d9f01 100644 --- a/data/2026/123xxx/CVE-2026-123513.json +++ b/data/2026/123xxx/CVE-2026-123513.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:46:28.480Z", "datePublished": "2026-11-08T01:37:25.882Z", - "dateUpdated": "2026-11-08T01:37:25.882Z" + "dateUpdated": "2026-11-10T17:59:59.119Z" }, "containers": { "cna": { @@ -133,6 +133,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:25:56.714602Z", + "id": "CVE-2026-123513", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:59.119Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123517.json b/data/2026/123xxx/CVE-2026-123517.json index fd1ceddd43..e88b5ed0b9 100644 --- a/data/2026/123xxx/CVE-2026-123517.json +++ b/data/2026/123xxx/CVE-2026-123517.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:47:14.649Z", "datePublished": "2026-11-08T01:37:28.811Z", - "dateUpdated": "2026-11-08T01:37:28.811Z" + "dateUpdated": "2026-11-10T17:59:52.297Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:39.344346Z", + "id": "CVE-2026-123517", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:52.297Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123521.json b/data/2026/123xxx/CVE-2026-123521.json index e7aa696e03..22aaa1c97a 100644 --- a/data/2026/123xxx/CVE-2026-123521.json +++ b/data/2026/123xxx/CVE-2026-123521.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:47:14.649Z", "datePublished": "2026-11-08T01:37:31.762Z", - "dateUpdated": "2026-11-08T01:37:31.762Z" + "dateUpdated": "2026-11-10T17:59:46.065Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:41.652335Z", + "id": "CVE-2026-123521", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:46.065Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123525.json b/data/2026/123xxx/CVE-2026-123525.json index 197c9f5e05..b94b7372f0 100644 --- a/data/2026/123xxx/CVE-2026-123525.json +++ b/data/2026/123xxx/CVE-2026-123525.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:48:01.381Z", "datePublished": "2026-11-08T01:37:34.920Z", - "dateUpdated": "2026-11-08T01:37:34.920Z" + "dateUpdated": "2026-11-10T17:59:39.099Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:43.964775Z", + "id": "CVE-2026-123525", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:39.099Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123529.json b/data/2026/123xxx/CVE-2026-123529.json index 317842ee42..e5e6252e02 100644 --- a/data/2026/123xxx/CVE-2026-123529.json +++ b/data/2026/123xxx/CVE-2026-123529.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:48:01.381Z", "datePublished": "2026-11-08T01:37:37.674Z", - "dateUpdated": "2026-11-08T01:37:37.674Z" + "dateUpdated": "2026-11-10T17:59:32.428Z" }, "containers": { "cna": { @@ -140,6 +140,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:46.726138Z", + "id": "CVE-2026-123529", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:32.428Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123533.json b/data/2026/123xxx/CVE-2026-123533.json index 435bd4b95f..ee811a2b64 100644 --- a/data/2026/123xxx/CVE-2026-123533.json +++ b/data/2026/123xxx/CVE-2026-123533.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:48:01.382Z", "datePublished": "2026-11-08T01:37:41.681Z", - "dateUpdated": "2026-11-08T01:37:41.681Z" + "dateUpdated": "2026-11-10T17:59:25.756Z" }, "containers": { "cna": { @@ -174,6 +174,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:49.362987Z", + "id": "CVE-2026-123533", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:25.756Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123537.json b/data/2026/123xxx/CVE-2026-123537.json index 6960b1718e..7a0d7604d9 100644 --- a/data/2026/123xxx/CVE-2026-123537.json +++ b/data/2026/123xxx/CVE-2026-123537.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:48:46.279Z", "datePublished": "2026-11-08T01:37:44.525Z", - "dateUpdated": "2026-11-08T01:37:44.525Z" + "dateUpdated": "2026-11-10T17:59:19.285Z" }, "containers": { "cna": { @@ -155,6 +155,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:51.745240Z", + "id": "CVE-2026-123537", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:19.285Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123541.json b/data/2026/123xxx/CVE-2026-123541.json index dae8b846e2..b9e12a1acb 100644 --- a/data/2026/123xxx/CVE-2026-123541.json +++ b/data/2026/123xxx/CVE-2026-123541.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:48:46.279Z", "datePublished": "2026-11-08T01:37:47.953Z", - "dateUpdated": "2026-11-08T01:37:47.953Z" + "dateUpdated": "2026-11-10T17:59:12.684Z" }, "containers": { "cna": { @@ -155,6 +155,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:11.406785Z", + "id": "CVE-2026-123541", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:12.684Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123545.json b/data/2026/123xxx/CVE-2026-123545.json index 6ddcc803cc..24f95fba40 100644 --- a/data/2026/123xxx/CVE-2026-123545.json +++ b/data/2026/123xxx/CVE-2026-123545.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:49:30.575Z", "datePublished": "2026-11-08T01:37:50.701Z", - "dateUpdated": "2026-11-08T01:37:50.701Z" + "dateUpdated": "2026-11-10T17:59:04.487Z" }, "containers": { "cna": { @@ -156,6 +156,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:13.982791Z", + "id": "CVE-2026-123545", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:59:04.487Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123553.json b/data/2026/123xxx/CVE-2026-123553.json index 9a7ed6ad48..96a32875dd 100644 --- a/data/2026/123xxx/CVE-2026-123553.json +++ b/data/2026/123xxx/CVE-2026-123553.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:49:30.576Z", "datePublished": "2026-11-08T01:37:56.207Z", - "dateUpdated": "2026-11-08T01:37:56.207Z" + "dateUpdated": "2026-11-10T17:58:53.625Z" }, "containers": { "cna": { @@ -223,6 +223,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:16.867302Z", + "id": "CVE-2026-123553", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:58:53.625Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123557.json b/data/2026/123xxx/CVE-2026-123557.json index d3649367cb..1092cb0f61 100644 --- a/data/2026/123xxx/CVE-2026-123557.json +++ b/data/2026/123xxx/CVE-2026-123557.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:50:45.483Z", "datePublished": "2026-11-08T01:37:58.967Z", - "dateUpdated": "2026-11-08T01:37:58.967Z" + "dateUpdated": "2026-11-10T17:58:43.746Z" }, "containers": { "cna": { @@ -150,6 +150,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:54.130729Z", + "id": "CVE-2026-123557", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:58:43.746Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123561.json b/data/2026/123xxx/CVE-2026-123561.json index 17b3282123..4603604906 100644 --- a/data/2026/123xxx/CVE-2026-123561.json +++ b/data/2026/123xxx/CVE-2026-123561.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:50:45.483Z", "datePublished": "2026-11-08T01:38:01.726Z", - "dateUpdated": "2026-11-08T01:38:01.726Z" + "dateUpdated": "2026-11-10T17:58:35.941Z" }, "containers": { "cna": { @@ -147,6 +147,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:56.785673Z", + "id": "CVE-2026-123561", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:58:35.941Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123565.json b/data/2026/123xxx/CVE-2026-123565.json index eb756ad4c4..d6101d8031 100644 --- a/data/2026/123xxx/CVE-2026-123565.json +++ b/data/2026/123xxx/CVE-2026-123565.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:53:14.312Z", "datePublished": "2026-11-08T01:38:04.469Z", - "dateUpdated": "2026-11-08T01:38:04.469Z" + "dateUpdated": "2026-11-10T17:58:28.362Z" }, "containers": { "cna": { @@ -147,6 +147,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:19.440498Z", + "id": "CVE-2026-123565", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:58:28.362Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123569.json b/data/2026/123xxx/CVE-2026-123569.json index d09278419c..47a72d9647 100644 --- a/data/2026/123xxx/CVE-2026-123569.json +++ b/data/2026/123xxx/CVE-2026-123569.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:53:14.312Z", "datePublished": "2026-11-08T01:38:07.240Z", - "dateUpdated": "2026-11-08T01:38:07.240Z" + "dateUpdated": "2026-11-10T17:58:20.402Z" }, "containers": { "cna": { @@ -147,6 +147,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:22.021173Z", + "id": "CVE-2026-123569", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:58:20.402Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123573.json b/data/2026/123xxx/CVE-2026-123573.json index 4cc6587d69..69469bf2b6 100644 --- a/data/2026/123xxx/CVE-2026-123573.json +++ b/data/2026/123xxx/CVE-2026-123573.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:53:14.313Z", "datePublished": "2026-11-08T01:38:09.961Z", - "dateUpdated": "2026-11-08T01:38:09.961Z" + "dateUpdated": "2026-11-10T17:58:09.934Z" }, "containers": { "cna": { @@ -123,6 +123,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:24.337816Z", + "id": "CVE-2026-123573", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:58:09.934Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123577.json b/data/2026/123xxx/CVE-2026-123577.json index b75740b14d..b558c0a359 100644 --- a/data/2026/123xxx/CVE-2026-123577.json +++ b/data/2026/123xxx/CVE-2026-123577.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:55:55.660Z", "datePublished": "2026-11-08T01:38:12.696Z", - "dateUpdated": "2026-11-08T01:38:12.696Z" + "dateUpdated": "2026-11-10T17:57:57.905Z" }, "containers": { "cna": { @@ -130,6 +130,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:26.566916Z", + "id": "CVE-2026-123577", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:57:57.905Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123581.json b/data/2026/123xxx/CVE-2026-123581.json index 6fbfdf97e4..bce923080f 100644 --- a/data/2026/123xxx/CVE-2026-123581.json +++ b/data/2026/123xxx/CVE-2026-123581.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:55:55.661Z", "datePublished": "2026-11-08T01:38:15.448Z", - "dateUpdated": "2026-11-08T01:38:15.448Z" + "dateUpdated": "2026-11-10T17:57:50.919Z" }, "containers": { "cna": { @@ -137,6 +137,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:28.830820Z", + "id": "CVE-2026-123581", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:57:50.919Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123585.json b/data/2026/123xxx/CVE-2026-123585.json index 7412047e6e..4b923d6a46 100644 --- a/data/2026/123xxx/CVE-2026-123585.json +++ b/data/2026/123xxx/CVE-2026-123585.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:57:31.044Z", "datePublished": "2026-11-08T01:38:18.261Z", - "dateUpdated": "2026-11-08T01:38:18.261Z" + "dateUpdated": "2026-11-10T17:57:43.009Z" }, "containers": { "cna": { @@ -130,6 +130,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:31.064348Z", + "id": "CVE-2026-123585", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:57:43.009Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123589.json b/data/2026/123xxx/CVE-2026-123589.json index ca46d070e1..c73fbbf400 100644 --- a/data/2026/123xxx/CVE-2026-123589.json +++ b/data/2026/123xxx/CVE-2026-123589.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:57:31.045Z", "datePublished": "2026-11-08T01:38:20.968Z", - "dateUpdated": "2026-11-08T01:38:20.968Z" + "dateUpdated": "2026-11-10T17:57:34.802Z" }, "containers": { "cna": { @@ -118,6 +118,52 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-400", + "lang": "en", + "description": "CWE-400 Uncontrolled Resource Consumption" + } + ] + } + ], + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:33.285987Z", + "id": "CVE-2026-123589", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:57:34.802Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123593.json b/data/2026/123xxx/CVE-2026-123593.json index 4fbb810b47..2ff4a56014 100644 --- a/data/2026/123xxx/CVE-2026-123593.json +++ b/data/2026/123xxx/CVE-2026-123593.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T00:57:31.045Z", "datePublished": "2026-11-08T01:38:23.719Z", - "dateUpdated": "2026-11-08T01:38:23.719Z" + "dateUpdated": "2026-11-10T17:57:27.374Z" }, "containers": { "cna": { @@ -144,6 +144,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:41:59.064360Z", + "id": "CVE-2026-123593", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:57:27.374Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123597.json b/data/2026/123xxx/CVE-2026-123597.json index 4310cf803f..e51f884d4e 100644 --- a/data/2026/123xxx/CVE-2026-123597.json +++ b/data/2026/123xxx/CVE-2026-123597.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T01:00:16.505Z", "datePublished": "2026-11-08T01:38:26.431Z", - "dateUpdated": "2026-11-08T01:38:26.431Z" + "dateUpdated": "2026-11-10T17:57:17.487Z" }, "containers": { "cna": { @@ -144,6 +144,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:02.122839Z", + "id": "CVE-2026-123597", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:57:17.487Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123601.json b/data/2026/123xxx/CVE-2026-123601.json index 2b9360e127..5ef060c5e4 100644 --- a/data/2026/123xxx/CVE-2026-123601.json +++ b/data/2026/123xxx/CVE-2026-123601.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T01:00:16.506Z", "datePublished": "2026-11-08T01:38:29.320Z", - "dateUpdated": "2026-11-08T01:38:29.320Z" + "dateUpdated": "2026-11-10T17:57:10.157Z" }, "containers": { "cna": { @@ -144,6 +144,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:05.282990Z", + "id": "CVE-2026-123601", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:57:10.157Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123605.json b/data/2026/123xxx/CVE-2026-123605.json index 607246d533..46e7eb2a96 100644 --- a/data/2026/123xxx/CVE-2026-123605.json +++ b/data/2026/123xxx/CVE-2026-123605.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T01:02:39.794Z", "datePublished": "2026-11-08T01:38:32.045Z", - "dateUpdated": "2026-11-08T01:38:32.045Z" + "dateUpdated": "2026-11-10T17:56:59.926Z" }, "containers": { "cna": { @@ -144,6 +144,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:26:03.880667Z", + "id": "CVE-2026-123605", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:59.926Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123609.json b/data/2026/123xxx/CVE-2026-123609.json index 960030b101..c552d36d5b 100644 --- a/data/2026/123xxx/CVE-2026-123609.json +++ b/data/2026/123xxx/CVE-2026-123609.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T01:02:39.794Z", "datePublished": "2026-11-08T01:38:34.811Z", - "dateUpdated": "2026-11-08T01:38:34.811Z" + "dateUpdated": "2026-11-10T17:56:51.627Z" }, "containers": { "cna": { @@ -150,6 +150,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:07.621483Z", + "id": "CVE-2026-123609", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:51.627Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/123xxx/CVE-2026-123613.json b/data/2026/123xxx/CVE-2026-123613.json index 36a445e2a1..6836c86797 100644 --- a/data/2026/123xxx/CVE-2026-123613.json +++ b/data/2026/123xxx/CVE-2026-123613.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-06T01:02:39.794Z", "datePublished": "2026-11-08T01:38:37.574Z", - "dateUpdated": "2026-11-08T01:38:37.574Z" + "dateUpdated": "2026-11-10T17:56:44.483Z" }, "containers": { "cna": { @@ -148,6 +148,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:35.553397Z", + "id": "CVE-2026-123613", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:44.483Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124170.json b/data/2026/124xxx/CVE-2026-124170.json new file mode 100644 index 0000000000..9c63699a25 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124170.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124170", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:04:23.712Z", + "datePublished": "2026-11-10T18:22:18.088Z", + "dateUpdated": "2026-11-10T18:22:18.088Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:18.088Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124170" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124174.json b/data/2026/124xxx/CVE-2026-124174.json new file mode 100644 index 0000000000..a21fafaf0e --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124174.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124174", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:04:23.713Z", + "datePublished": "2026-11-10T18:22:18.539Z", + "dateUpdated": "2026-11-10T18:22:18.539Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:18.539Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124174" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124176.json b/data/2026/124xxx/CVE-2026-124176.json new file mode 100644 index 0000000000..9adde07506 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124176.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124176", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:04:23.713Z", + "datePublished": "2026-11-10T18:22:19.205Z", + "dateUpdated": "2026-11-10T18:22:19.205Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:19.205Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124176" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124178.json b/data/2026/124xxx/CVE-2026-124178.json new file mode 100644 index 0000000000..5ee8d2069e --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124178.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124178", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:04:23.713Z", + "datePublished": "2026-11-10T18:22:19.758Z", + "dateUpdated": "2026-11-10T18:22:19.758Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:19.758Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124178" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124179.json b/data/2026/124xxx/CVE-2026-124179.json new file mode 100644 index 0000000000..15ed9b3b16 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124179.json @@ -0,0 +1,221 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124179", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:04:23.713Z", + "datePublished": "2026-11-10T18:22:20.274Z", + "dateUpdated": "2026-11-10T18:22:20.274Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:ltsc:*:*:*", + "versionStartIncluding": "16.0.0.0", + "versionEndExcluding": "16.0.10417.20236" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Office Online Server", + "versions": [ + { + "version": "16.0.0.0", + "lessThan": "16.0.10417.20236", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:20.274Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124179" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124183.json b/data/2026/124xxx/CVE-2026-124183.json new file mode 100644 index 0000000000..f8dadf8b7b --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124183.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124183", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:04:23.713Z", + "datePublished": "2026-11-10T18:22:20.828Z", + "dateUpdated": "2026-11-10T18:22:20.828Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:20.828Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124183" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124185.json b/data/2026/124xxx/CVE-2026-124185.json new file mode 100644 index 0000000000..deee3e6634 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124185.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124185", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:09:21.493Z", + "datePublished": "2026-11-10T18:22:21.484Z", + "dateUpdated": "2026-11-10T18:22:21.484Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:21.484Z" + }, + "references": [ + { + "name": "Microsoft Office Word Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124185" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124187.json b/data/2026/124xxx/CVE-2026-124187.json new file mode 100644 index 0000000000..9660c34f42 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124187.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124187", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:09:21.493Z", + "datePublished": "2026-11-10T18:22:22.050Z", + "dateUpdated": "2026-11-10T18:22:22.050Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:22.050Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124187" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124194.json b/data/2026/124xxx/CVE-2026-124194.json new file mode 100644 index 0000000000..8258e1a659 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124194.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124194", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:09:21.493Z", + "datePublished": "2026-11-10T18:22:22.493Z", + "dateUpdated": "2026-11-10T18:22:22.493Z" + }, + "containers": { + "cna": { + "title": "Microsoft Outlook Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-356: Product UI does not Warn User of Unsafe Actions", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-356" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:22.493Z" + }, + "references": [ + { + "name": "Microsoft Outlook Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124210.json b/data/2026/124xxx/CVE-2026-124210.json new file mode 100644 index 0000000000..ac23ae3c49 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124210.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124210", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:09:21.494Z", + "datePublished": "2026-11-10T18:22:24.748Z", + "dateUpdated": "2026-11-10T18:22:24.748Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-918: Server-Side Request Forgery (SSRF)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-918" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:24.748Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124210" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124224.json b/data/2026/124xxx/CVE-2026-124224.json new file mode 100644 index 0000000000..bd580e02ae --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124224.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124224", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:46:11.430Z", + "datePublished": "2026-11-10T18:21:42.752Z", + "dateUpdated": "2026-11-10T18:21:42.752Z" + }, + "containers": { + "cna": { + "title": "PowerShell Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33812" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33812" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33812", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33812", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:42.752Z" + }, + "references": [ + { + "name": "PowerShell Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124224" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124225.json b/data/2026/124xxx/CVE-2026-124225.json new file mode 100644 index 0000000000..390df01db7 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124225.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124225", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:46:11.430Z", + "datePublished": "2026-11-10T18:21:43.300Z", + "dateUpdated": "2026-11-10T18:21:43.300Z" + }, + "containers": { + "cna": { + "title": "Windows PowerShell Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33812" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33812" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33812", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33812", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-94" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:43.300Z" + }, + "references": [ + { + "name": "Windows PowerShell Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124225" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124226.json b/data/2026/124xxx/CVE-2026-124226.json new file mode 100644 index 0000000000..89a2faa12d --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124226.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124226", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:46:11.430Z", + "datePublished": "2026-11-10T18:21:43.741Z", + "dateUpdated": "2026-11-10T18:21:43.741Z" + }, + "containers": { + "cna": { + "title": "Microsoft PowerShell Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9968" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33812" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33812" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9968", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33812", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33812", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-250: Execution with Unnecessary Privileges", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-250" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:43.741Z" + }, + "references": [ + { + "name": "Microsoft PowerShell Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124226" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124227.json b/data/2026/124xxx/CVE-2026-124227.json new file mode 100644 index 0000000000..ecd9c32f6c --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124227.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124227", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:46:11.430Z", + "datePublished": "2026-11-10T18:22:01.191Z", + "dateUpdated": "2026-11-10T18:22:01.191Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:01.191Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124227" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124228.json b/data/2026/124xxx/CVE-2026-124228.json new file mode 100644 index 0000000000..7ce8e097aa --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124228.json @@ -0,0 +1,149 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124228", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:46:11.430Z", + "datePublished": "2026-11-10T18:22:01.640Z", + "dateUpdated": "2026-11-10T18:22:01.640Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-22" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:01.640Z" + }, + "references": [ + { + "name": "Microsoft Office Outlook Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124228" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124229.json b/data/2026/124xxx/CVE-2026-124229.json new file mode 100644 index 0000000000..def7716382 --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124229.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124229", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:46:11.430Z", + "datePublished": "2026-11-10T18:22:02.080Z", + "dateUpdated": "2026-11-10T18:22:02.080Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Excel Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-502: Deserialization of Untrusted Data", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-502" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:02.080Z" + }, + "references": [ + { + "name": "Microsoft Office Excel Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124229" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124233.json b/data/2026/124xxx/CVE-2026-124233.json new file mode 100644 index 0000000000..850f4340de --- /dev/null +++ b/data/2026/124xxx/CVE-2026-124233.json @@ -0,0 +1,203 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-124233", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-06T22:46:11.430Z", + "datePublished": "2026-11-10T18:22:02.672Z", + "dateUpdated": "2026-11-10T18:22:02.672Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office Word Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_macos_2024:*:*:*:*:*:long_term_servicing_channel:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_365:*:*:*:*:*:macos:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "16.115.26110837" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "16.0.14334.21048" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.17932.21140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "16.0.1", + "versionEndExcluding": "https://aka.ms/OfficeSecurityReleases" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft 365 Apps for Enterprise", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "https://aka.ms/OfficeSecurityReleases", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office 365 for Mac", + "versions": [ + { + "version": "1.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2021", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.0.14334.21048", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC 2024", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.17932.21140", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2021", + "versions": [ + { + "version": "16.0.1", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft Office LTSC for Mac 2024", + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.115.26110837", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:22:02.672Z" + }, + "references": [ + { + "name": "Microsoft Office Word Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124233" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124329.json b/data/2026/124xxx/CVE-2026-124329.json index f75b68e66a..933372bc84 100644 --- a/data/2026/124xxx/CVE-2026-124329.json +++ b/data/2026/124xxx/CVE-2026-124329.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-07T19:35:21.895Z", "datePublished": "2026-11-08T12:00:20.659Z", - "dateUpdated": "2026-11-08T12:00:20.659Z" + "dateUpdated": "2026-11-10T17:56:30.290Z" }, "containers": { "cna": { @@ -350,6 +350,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:40:16.994660Z", + "id": "CVE-2026-124329", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:30.290Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124422.json b/data/2026/124xxx/CVE-2026-124422.json index 42fc4dce92..03e0be88e4 100644 --- a/data/2026/124xxx/CVE-2026-124422.json +++ b/data/2026/124xxx/CVE-2026-124422.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T00:57:59.205Z", "datePublished": "2026-11-08T01:38:41.148Z", - "dateUpdated": "2026-11-08T01:38:41.148Z" + "dateUpdated": "2026-11-10T17:56:37.271Z" }, "containers": { "cna": { @@ -153,6 +153,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:37.766796Z", + "id": "CVE-2026-124422", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:37.271Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124431.json b/data/2026/124xxx/CVE-2026-124431.json index 194b40ec75..50cc31fcaf 100644 --- a/data/2026/124xxx/CVE-2026-124431.json +++ b/data/2026/124xxx/CVE-2026-124431.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:12:19.300Z", "datePublished": "2026-11-08T13:15:27.379Z", - "dateUpdated": "2026-11-08T13:15:27.379Z" + "dateUpdated": "2026-11-10T17:56:23.693Z" }, "containers": { "cna": { @@ -147,6 +147,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:09.947017Z", + "id": "CVE-2026-124431", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:23.693Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124435.json b/data/2026/124xxx/CVE-2026-124435.json index db97aa0eb4..6ca900d2f2 100644 --- a/data/2026/124xxx/CVE-2026-124435.json +++ b/data/2026/124xxx/CVE-2026-124435.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:13:42.362Z", "datePublished": "2026-11-08T13:15:30.230Z", - "dateUpdated": "2026-11-08T13:15:30.230Z" + "dateUpdated": "2026-11-10T17:56:16.641Z" }, "containers": { "cna": { @@ -145,6 +145,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:12.328365Z", + "id": "CVE-2026-124435", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:16.641Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124439.json b/data/2026/124xxx/CVE-2026-124439.json index cf1c2652c6..0909ca0a71 100644 --- a/data/2026/124xxx/CVE-2026-124439.json +++ b/data/2026/124xxx/CVE-2026-124439.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:13:42.362Z", "datePublished": "2026-11-08T13:15:33.017Z", - "dateUpdated": "2026-11-08T13:15:33.017Z" + "dateUpdated": "2026-11-10T17:56:09.497Z" }, "containers": { "cna": { @@ -135,6 +135,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:40.071556Z", + "id": "CVE-2026-124439", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:09.497Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124443.json b/data/2026/124xxx/CVE-2026-124443.json index 5f5d353b91..4fdac74ce1 100644 --- a/data/2026/124xxx/CVE-2026-124443.json +++ b/data/2026/124xxx/CVE-2026-124443.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:13:42.362Z", "datePublished": "2026-11-08T13:15:35.879Z", - "dateUpdated": "2026-11-08T13:15:35.879Z" + "dateUpdated": "2026-11-10T17:56:00.671Z" }, "containers": { "cna": { @@ -180,6 +180,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:14.561959Z", + "id": "CVE-2026-124443", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:56:00.671Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124447.json b/data/2026/124xxx/CVE-2026-124447.json index d422f5723d..050c2981e9 100644 --- a/data/2026/124xxx/CVE-2026-124447.json +++ b/data/2026/124xxx/CVE-2026-124447.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:14:31.305Z", "datePublished": "2026-11-08T13:15:39.588Z", - "dateUpdated": "2026-11-08T13:15:39.588Z" + "dateUpdated": "2026-11-10T17:55:49.992Z" }, "containers": { "cna": { @@ -151,6 +151,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:26:06.618185Z", + "id": "CVE-2026-124447", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:55:49.992Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124451.json b/data/2026/124xxx/CVE-2026-124451.json index a705295afa..3ffd9b392d 100644 --- a/data/2026/124xxx/CVE-2026-124451.json +++ b/data/2026/124xxx/CVE-2026-124451.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:14:31.305Z", "datePublished": "2026-11-08T13:15:42.406Z", - "dateUpdated": "2026-11-08T13:15:42.406Z" + "dateUpdated": "2026-11-10T17:55:37.521Z" }, "containers": { "cna": { @@ -139,6 +139,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:16.879033Z", + "id": "CVE-2026-124451", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:55:37.521Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124456.json b/data/2026/124xxx/CVE-2026-124456.json index c645eda6c8..adf3f096ea 100644 --- a/data/2026/124xxx/CVE-2026-124456.json +++ b/data/2026/124xxx/CVE-2026-124456.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:15:45.475Z", "datePublished": "2026-11-08T13:15:45.133Z", - "dateUpdated": "2026-11-08T13:15:45.133Z" + "dateUpdated": "2026-11-10T17:55:24.107Z" }, "containers": { "cna": { @@ -139,6 +139,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:19.260284Z", + "id": "CVE-2026-124456", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:55:24.107Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124460.json b/data/2026/124xxx/CVE-2026-124460.json index a8a852f9d9..31fc87d1d0 100644 --- a/data/2026/124xxx/CVE-2026-124460.json +++ b/data/2026/124xxx/CVE-2026-124460.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:15:45.476Z", "datePublished": "2026-11-08T13:15:47.865Z", - "dateUpdated": "2026-11-08T13:15:47.865Z" + "dateUpdated": "2026-11-10T17:55:13.327Z" }, "containers": { "cna": { @@ -139,6 +139,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:21.602594Z", + "id": "CVE-2026-124460", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:55:13.327Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124464.json b/data/2026/124xxx/CVE-2026-124464.json index 517ec1859d..1318c47dfd 100644 --- a/data/2026/124xxx/CVE-2026-124464.json +++ b/data/2026/124xxx/CVE-2026-124464.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:15:45.476Z", "datePublished": "2026-11-08T13:15:50.569Z", - "dateUpdated": "2026-11-08T13:15:50.569Z" + "dateUpdated": "2026-11-10T17:55:00.043Z" }, "containers": { "cna": { @@ -149,6 +149,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:24.870675Z", + "id": "CVE-2026-124464", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:55:00.043Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124469.json b/data/2026/124xxx/CVE-2026-124469.json index b449c28e75..6e3bacd33f 100644 --- a/data/2026/124xxx/CVE-2026-124469.json +++ b/data/2026/124xxx/CVE-2026-124469.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:16:30.558Z", "datePublished": "2026-11-08T13:15:53.279Z", - "dateUpdated": "2026-11-08T13:15:53.279Z" + "dateUpdated": "2026-11-10T17:54:49.624Z" }, "containers": { "cna": { @@ -144,6 +144,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:26:10.278730Z", + "id": "CVE-2026-124469", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:54:49.624Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124473.json b/data/2026/124xxx/CVE-2026-124473.json index e3687b0c83..b53e13eaf2 100644 --- a/data/2026/124xxx/CVE-2026-124473.json +++ b/data/2026/124xxx/CVE-2026-124473.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:16:30.558Z", "datePublished": "2026-11-08T13:15:55.948Z", - "dateUpdated": "2026-11-08T13:15:55.948Z" + "dateUpdated": "2026-11-10T17:54:37.240Z" }, "containers": { "cna": { @@ -139,6 +139,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:27.582831Z", + "id": "CVE-2026-124473", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:54:37.240Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124478.json b/data/2026/124xxx/CVE-2026-124478.json index d6327c628a..fd2a0a954a 100644 --- a/data/2026/124xxx/CVE-2026-124478.json +++ b/data/2026/124xxx/CVE-2026-124478.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:17:31.140Z", "datePublished": "2026-11-08T13:15:58.664Z", - "dateUpdated": "2026-11-08T13:15:58.664Z" + "dateUpdated": "2026-11-10T17:54:27.521Z" }, "containers": { "cna": { @@ -146,6 +146,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:30.294396Z", + "id": "CVE-2026-124478", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:54:27.521Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124482.json b/data/2026/124xxx/CVE-2026-124482.json index 6fffa0ad41..4f72d77d3a 100644 --- a/data/2026/124xxx/CVE-2026-124482.json +++ b/data/2026/124xxx/CVE-2026-124482.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:17:31.141Z", "datePublished": "2026-11-08T13:16:01.436Z", - "dateUpdated": "2026-11-08T13:16:01.436Z" + "dateUpdated": "2026-11-10T17:54:17.439Z" }, "containers": { "cna": { @@ -139,6 +139,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:33.190736Z", + "id": "CVE-2026-124482", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:54:17.439Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124486.json b/data/2026/124xxx/CVE-2026-124486.json index 9f841d28ee..76e26c8506 100644 --- a/data/2026/124xxx/CVE-2026-124486.json +++ b/data/2026/124xxx/CVE-2026-124486.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:21:16.290Z", "datePublished": "2026-11-08T13:16:04.371Z", - "dateUpdated": "2026-11-08T13:16:04.371Z" + "dateUpdated": "2026-11-10T17:54:06.728Z" }, "containers": { "cna": { @@ -146,6 +146,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:26:13.058712Z", + "id": "CVE-2026-124486", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:54:06.728Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124490.json b/data/2026/124xxx/CVE-2026-124490.json index 273ae98855..0b61375745 100644 --- a/data/2026/124xxx/CVE-2026-124490.json +++ b/data/2026/124xxx/CVE-2026-124490.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:21:16.290Z", "datePublished": "2026-11-08T13:16:07.121Z", - "dateUpdated": "2026-11-08T13:16:07.121Z" + "dateUpdated": "2026-11-10T17:53:53.764Z" }, "containers": { "cna": { @@ -139,6 +139,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:26:16.166900Z", + "id": "CVE-2026-124490", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:53:53.764Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124494.json b/data/2026/124xxx/CVE-2026-124494.json index 55edd1b6c3..a3d757c991 100644 --- a/data/2026/124xxx/CVE-2026-124494.json +++ b/data/2026/124xxx/CVE-2026-124494.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T02:21:16.290Z", "datePublished": "2026-11-08T13:16:09.907Z", - "dateUpdated": "2026-11-08T13:16:09.907Z" + "dateUpdated": "2026-11-10T17:53:45.128Z" }, "containers": { "cna": { @@ -106,6 +106,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:26:18.573220Z", + "id": "CVE-2026-124494", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:53:45.128Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124499.json b/data/2026/124xxx/CVE-2026-124499.json index a56d900fa6..48e0bd7195 100644 --- a/data/2026/124xxx/CVE-2026-124499.json +++ b/data/2026/124xxx/CVE-2026-124499.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T08:00:42.187Z", "datePublished": "2026-11-08T23:15:19.222Z", - "dateUpdated": "2026-11-08T23:15:19.222Z" + "dateUpdated": "2026-11-10T17:53:18.158Z" }, "containers": { "cna": { @@ -223,6 +223,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:40:19.707178Z", + "id": "CVE-2026-124499", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:53:18.158Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124504.json b/data/2026/124xxx/CVE-2026-124504.json index 9efc801905..bb10608d8e 100644 --- a/data/2026/124xxx/CVE-2026-124504.json +++ b/data/2026/124xxx/CVE-2026-124504.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T10:48:07.675Z", "datePublished": "2026-11-09T00:15:31.475Z", - "dateUpdated": "2026-11-09T00:15:31.475Z" + "dateUpdated": "2026-11-10T17:53:10.249Z" }, "containers": { "cna": { @@ -197,6 +197,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:38.017272Z", + "id": "CVE-2026-124504", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:53:10.249Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124508.json b/data/2026/124xxx/CVE-2026-124508.json index 4a24c4d75e..15fd31e097 100644 --- a/data/2026/124xxx/CVE-2026-124508.json +++ b/data/2026/124xxx/CVE-2026-124508.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T10:53:42.109Z", "datePublished": "2026-11-09T01:15:23.149Z", - "dateUpdated": "2026-11-09T01:15:23.149Z" + "dateUpdated": "2026-11-10T17:52:58.371Z" }, "containers": { "cna": { @@ -179,6 +179,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:44.671069Z", + "id": "CVE-2026-124508", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:52:58.371Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124552.json b/data/2026/124xxx/CVE-2026-124552.json index 230cae3c7c..64e8b5cde2 100644 --- a/data/2026/124xxx/CVE-2026-124552.json +++ b/data/2026/124xxx/CVE-2026-124552.json @@ -8,7 +8,7 @@ "assignerShortName": "VulnCheck", "dateReserved": "2026-11-08T13:43:29.713Z", "datePublished": "2026-11-08T13:52:34.975Z", - "dateUpdated": "2026-11-08T13:52:34.975Z" + "dateUpdated": "2026-11-10T17:53:35.739Z" }, "containers": { "cna": { @@ -164,6 +164,40 @@ "x_generator": { "engine": "vulncheck-endgame" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:35.540391Z", + "id": "CVE-2026-124552", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:53:35.739Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124556.json b/data/2026/124xxx/CVE-2026-124556.json index ebabccd082..530099cb2b 100644 --- a/data/2026/124xxx/CVE-2026-124556.json +++ b/data/2026/124xxx/CVE-2026-124556.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T14:13:51.633Z", "datePublished": "2026-11-09T02:15:25.557Z", - "dateUpdated": "2026-11-09T02:15:25.557Z" + "dateUpdated": "2026-11-10T17:52:48.497Z" }, "containers": { "cna": { @@ -172,6 +172,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:46.896822Z", + "id": "CVE-2026-124556", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:52:48.497Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124561.json b/data/2026/124xxx/CVE-2026-124561.json index 56f538897f..d3fffd8d86 100644 --- a/data/2026/124xxx/CVE-2026-124561.json +++ b/data/2026/124xxx/CVE-2026-124561.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T14:46:56.088Z", "datePublished": "2026-11-09T03:15:50.227Z", - "dateUpdated": "2026-11-09T03:15:50.227Z" + "dateUpdated": "2026-11-10T17:52:34.534Z" }, "containers": { "cna": { @@ -172,6 +172,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:41:04.146300Z", + "id": "CVE-2026-124561", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:52:34.534Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124565.json b/data/2026/124xxx/CVE-2026-124565.json index 1fe50e08cd..a6b82d869b 100644 --- a/data/2026/124xxx/CVE-2026-124565.json +++ b/data/2026/124xxx/CVE-2026-124565.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T14:55:05.807Z", "datePublished": "2026-11-09T04:15:20.046Z", - "dateUpdated": "2026-11-09T04:15:20.046Z" + "dateUpdated": "2026-11-10T17:52:14.959Z" }, "containers": { "cna": { @@ -161,6 +161,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:40.412867Z", + "id": "CVE-2026-124565", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:52:14.959Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124569.json b/data/2026/124xxx/CVE-2026-124569.json index 3800245410..c9e2ff4476 100644 --- a/data/2026/124xxx/CVE-2026-124569.json +++ b/data/2026/124xxx/CVE-2026-124569.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T14:55:21.665Z", "datePublished": "2026-11-09T05:15:07.727Z", - "dateUpdated": "2026-11-09T05:15:07.727Z" + "dateUpdated": "2026-11-10T17:52:03.954Z" }, "containers": { "cna": { @@ -158,6 +158,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:42.644466Z", + "id": "CVE-2026-124569", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:52:03.954Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124573.json b/data/2026/124xxx/CVE-2026-124573.json index 7c95bf7285..827bdd62d1 100644 --- a/data/2026/124xxx/CVE-2026-124573.json +++ b/data/2026/124xxx/CVE-2026-124573.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T16:51:31.805Z", "datePublished": "2026-11-09T06:15:15.285Z", - "dateUpdated": "2026-11-09T06:15:15.285Z" + "dateUpdated": "2026-11-10T17:51:50.127Z" }, "containers": { "cna": { @@ -178,6 +178,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:41:07.542829Z", + "id": "CVE-2026-124573", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:51:50.127Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124581.json b/data/2026/124xxx/CVE-2026-124581.json index 588e6afb57..47ac59fe17 100644 --- a/data/2026/124xxx/CVE-2026-124581.json +++ b/data/2026/124xxx/CVE-2026-124581.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T17:12:58.716Z", "datePublished": "2026-11-09T08:15:27.055Z", - "dateUpdated": "2026-11-09T08:15:27.055Z" + "dateUpdated": "2026-11-10T17:51:40.940Z" }, "containers": { "cna": { @@ -169,6 +169,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:41:09.826359Z", + "id": "CVE-2026-124581", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:51:40.940Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124586.json b/data/2026/124xxx/CVE-2026-124586.json index 978de92238..029f4b609c 100644 --- a/data/2026/124xxx/CVE-2026-124586.json +++ b/data/2026/124xxx/CVE-2026-124586.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T20:24:01.430Z", "datePublished": "2026-11-09T09:15:15.469Z", - "dateUpdated": "2026-11-09T09:15:15.469Z" + "dateUpdated": "2026-11-10T17:51:34.077Z" }, "containers": { "cna": { @@ -171,6 +171,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:41:12.240234Z", + "id": "CVE-2026-124586", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:51:34.077Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124590.json b/data/2026/124xxx/CVE-2026-124590.json index c56bc6be4f..09d2766877 100644 --- a/data/2026/124xxx/CVE-2026-124590.json +++ b/data/2026/124xxx/CVE-2026-124590.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-08T20:36:15.437Z", "datePublished": "2026-11-09T10:15:21.119Z", - "dateUpdated": "2026-11-09T10:15:21.119Z" + "dateUpdated": "2026-11-10T17:51:26.986Z" }, "containers": { "cna": { @@ -175,6 +175,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:41:14.875144Z", + "id": "CVE-2026-124590", + "options": [ + { + "Exploitation": "poc" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:51:26.986Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124622.json b/data/2026/124xxx/CVE-2026-124622.json index 307c53a2e9..b0a9301673 100644 --- a/data/2026/124xxx/CVE-2026-124622.json +++ b/data/2026/124xxx/CVE-2026-124622.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-09T06:57:28.604Z", "datePublished": "2026-11-09T12:45:23.743Z", - "dateUpdated": "2026-11-09T12:45:23.743Z" + "dateUpdated": "2026-11-10T17:51:20.053Z" }, "containers": { "cna": { @@ -201,6 +201,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:44.951729Z", + "id": "CVE-2026-124622", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:51:20.053Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/124xxx/CVE-2026-124635.json b/data/2026/124xxx/CVE-2026-124635.json index a8124ac202..4eac6a12e4 100644 --- a/data/2026/124xxx/CVE-2026-124635.json +++ b/data/2026/124xxx/CVE-2026-124635.json @@ -8,7 +8,7 @@ "assignerShortName": "VulDB", "dateReserved": "2026-11-09T08:08:24.665Z", "datePublished": "2026-11-09T14:00:12.996Z", - "dateUpdated": "2026-11-09T14:00:12.996Z" + "dateUpdated": "2026-11-10T17:51:04.330Z" }, "containers": { "cna": { @@ -199,6 +199,40 @@ "x_generator": [ "VulDB PVTS v202611" ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T15:42:49.978726Z", + "id": "CVE-2026-124635", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:51:04.330Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125134.json b/data/2026/125xxx/CVE-2026-125134.json new file mode 100644 index 0000000000..e0b1299bb0 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125134.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125134", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-09T18:07:16.437Z", + "datePublished": "2026-11-10T18:20:09.691Z", + "dateUpdated": "2026-11-10T18:20:09.691Z" + }, + "containers": { + "cna": { + "title": "Windows Function Discovery Resource Publication Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:09.691Z" + }, + "references": [ + { + "name": "Windows Function Discovery Resource Publication Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-125134" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125135.json b/data/2026/125xxx/CVE-2026-125135.json new file mode 100644 index 0000000000..e05af28409 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125135.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125135", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-09T18:07:16.437Z", + "datePublished": "2026-11-10T18:21:44.260Z", + "dateUpdated": "2026-11-10T18:21:44.260Z" + }, + "containers": { + "cna": { + "title": "HID Parser Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:44.260Z" + }, + "references": [ + { + "name": "HID Parser Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-125135" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125136.json b/data/2026/125xxx/CVE-2026-125136.json new file mode 100644 index 0000000000..b4a55558af --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125136.json @@ -0,0 +1,303 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125136", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-09T18:07:16.437Z", + "datePublished": "2026-11-10T18:21:44.712Z", + "dateUpdated": "2026-11-10T18:21:44.712Z" + }, + "containers": { + "cna": { + "title": "Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:44.712Z" + }, + "references": [ + { + "name": "Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-125136" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125137.json b/data/2026/125xxx/CVE-2026-125137.json new file mode 100644 index 0000000000..8906a8fb89 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125137.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125137", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-11-09T18:07:16.437Z", + "datePublished": "2026-11-10T18:21:45.225Z", + "dateUpdated": "2026-11-10T18:21:45.225Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:45.225Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-125137" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125323.json b/data/2026/125xxx/CVE-2026-125323.json new file mode 100644 index 0000000000..fa7fae517a --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125323.json @@ -0,0 +1,122 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125323", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.597Z", + "datePublished": "2026-11-10T17:52:28.455Z", + "dateUpdated": "2026-11-10T17:52:28.455Z" + }, + "containers": { + "cna": { + "title": "pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-306", + "lang": "en", + "description": "CWE-306: Missing Authentication for Critical Functionality", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-1188", + "lang": "en", + "description": "CWE-1188: Initialization of a Resource with an Insecure Default", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "LOCAL", + "availabilityImpact": "HIGH", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/pgEdge/control-plane/security/advisories/GHSA-vq9p-w6wv-cr25", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/pgEdge/control-plane/security/advisories/GHSA-vq9p-w6wv-cr25" + }, + { + "name": "https://github.com/pgEdge/control-plane/pull/470", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/control-plane/pull/470" + }, + { + "name": "https://github.com/pgEdge/control-plane/commit/88659f7388fc6c86125e60475aa83810171145b7", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/control-plane/commit/88659f7388fc6c86125e60475aa83810171145b7" + }, + { + "name": "https://github.com/pgEdge/control-plane/blob/main/changes/v0.11.0.md", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/control-plane/blob/main/changes/v0.11.0.md" + }, + { + "name": "https://github.com/pgEdge/control-plane/releases/tag/v0.11.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/control-plane/releases/tag/v0.11.0" + } + ], + "affected": [ + { + "vendor": "pgEdge", + "product": "control-plane", + "versions": [ + { + "version": "< 0.11.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T17:52:28.455Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pgEdge Control Plane is a distributed application for managing and orchestrating Postgres databases across multiple hosts. From 0.1.0 to 0.10.1, generated pg_hba.conf files began with hard-coded trust entries for Unix-socket and loopback connections. Because PostgreSQL evaluates the file from top to bottom, those entries also preempted operator-supplied rules in the pg_hba_conf field. Under the systemd orchestrator, any unprivileged operating-system account on a database host could authenticate as any PostgreSQL role, including the superuser, without credentials and obtain full control of the host's databases. Under Docker Swarm, reaching the container-local socket or loopback interface required code execution inside the database container. Publishing the PostgreSQL port to the host did not expose these trust rules because host connections did not appear to originate from 127.0.0.1 or ::1. This issue is fixed in version 0.11.0." + } + ], + "source": { + "advisory": "GHSA-vq9p-w6wv-cr25", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125325.json b/data/2026/125xxx/CVE-2026-125325.json new file mode 100644 index 0000000000..35e2370542 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125325.json @@ -0,0 +1,115 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125325", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.597Z", + "datePublished": "2026-11-10T17:58:40.428Z", + "dateUpdated": "2026-11-10T17:58:40.428Z" + }, + "containers": { + "cna": { + "title": "pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-362", + "lang": "en", + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-488", + "lang": "en", + "description": "CWE-488: Exposure of Data Element to Wrong Session", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "HIGH", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/pgEdge/pgedge-rag-server/security/advisories/GHSA-w437-9mwm-j6vq", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/security/advisories/GHSA-w437-9mwm-j6vq" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/pull/44", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/pull/44" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/commit/a09d4872356b510c81f11591845445c33ff45a84", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/commit/a09d4872356b510c81f11591845445c33ff45a84" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/releases/tag/v2.0.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/releases/tag/v2.0.0" + } + ], + "affected": [ + { + "vendor": "pgEdge", + "product": "pgedge-rag-server", + "versions": [ + { + "version": "< 2.0.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T17:58:40.428Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the BM25 keyword index is a single per-pipeline object shared by the unauthenticated query endpoint, and concurrent requests lock its clear, refill, and search operations separately. This allows one request to search a corpus populated through another request's search filter, which can return documents belonging to a different tenant or customer without malformed input. The affected responses cannot be identified retrospectively from the server logs. This issue is fixed in version 2.0.0." + } + ], + "source": { + "advisory": "GHSA-w437-9mwm-j6vq", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125326.json b/data/2026/125xxx/CVE-2026-125326.json new file mode 100644 index 0000000000..397676ed73 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125326.json @@ -0,0 +1,115 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125326", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.598Z", + "datePublished": "2026-11-10T18:01:18.698Z", + "dateUpdated": "2026-11-10T18:01:18.698Z" + }, + "containers": { + "cna": { + "title": "pgEdge RAG Server discloses part of the configured provider credential through API error messagespgEdge RAG Server discloses part of the configured provider credential through API error messages", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-209", + "lang": "en", + "description": "CWE-209: Generation of Error Message Containing Sensitive Information", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-522", + "lang": "en", + "description": "CWE-522: Insufficiently Protected Credentials", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 5.8, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "CHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/pgEdge/pgedge-rag-server/security/advisories/GHSA-68g8-gh8f-7rhg", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/security/advisories/GHSA-68g8-gh8f-7rhg" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/pull/45", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/pull/45" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/commit/72e0785a6d7cc9e35ad67d570bc9fddeaa4b2f61", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/commit/72e0785a6d7cc9e35ad67d570bc9fddeaa4b2f61" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/releases/tag/v2.0.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/releases/tag/v2.0.0" + } + ], + "affected": [ + { + "vendor": "pgEdge", + "product": "pgedge-rag-server", + "versions": [ + { + "version": "< 2.0.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T18:01:18.698Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query API in internal/server/handlers.go returns err.Error() from failed LLM provider calls, preserving provider-controlled error text that can quote a partially masked submitted API key. A remote caller can cause an authentication failure and obtain part of the operator's credential for the third-party provider account through the query API error response. This issue is fixed in version 2.0.0." + } + ], + "source": { + "advisory": "GHSA-68g8-gh8f-7rhg", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125327.json b/data/2026/125xxx/CVE-2026-125327.json new file mode 100644 index 0000000000..359961bcf6 --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125327.json @@ -0,0 +1,115 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125327", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.598Z", + "datePublished": "2026-11-10T18:02:58.722Z", + "dateUpdated": "2026-11-10T18:02:58.722Z" + }, + "containers": { + "cna": { + "title": "pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-405", + "lang": "en", + "description": "CWE-405: Asymmetric Resource Consumption (Amplification)", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-770", + "lang": "en", + "description": "CWE-770: Allocation of Resources Without Limits or Throttling", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/pgEdge/pgedge-rag-server/security/advisories/GHSA-5qg5-rgp6-j5m5", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/security/advisories/GHSA-5qg5-rgp6-j5m5" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/pull/44", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/pull/44" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/commit/a09d4872356b510c81f11591845445c33ff45a84", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/commit/a09d4872356b510c81f11591845445c33ff45a84" + }, + { + "name": "https://github.com/pgEdge/pgedge-rag-server/releases/tag/v2.0.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-rag-server/releases/tag/v2.0.0" + } + ], + "affected": [ + { + "vendor": "pgEdge", + "product": "pgedge-rag-server", + "versions": [ + { + "version": "< 2.0.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T18:02:58.722Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query endpoint uses FetchDocuments in internal/database/search.go to read the entire filtered corpus without a LIMIT and rebuild an in-memory BM25 index on every request. Because HybridEnabled is set by default in internal/config/loader.go and the endpoint has no rate limit, inexpensive remote queries can impose database and CPU work proportional to corpus size and exhaust service resources. This issue is fixed in version 2.0.0." + } + ], + "source": { + "advisory": "GHSA-5qg5-rgp6-j5m5", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125328.json b/data/2026/125xxx/CVE-2026-125328.json new file mode 100644 index 0000000000..c10207ff6c --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125328.json @@ -0,0 +1,122 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125328", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.598Z", + "datePublished": "2026-11-10T18:05:20.491Z", + "dateUpdated": "2026-11-10T18:05:20.491Z" + }, + "containers": { + "cna": { + "title": "pgEdge Go LLM Library discloses provider API key fragments in error messages", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-209", + "lang": "en", + "description": "CWE-209: Generation of Error Message Containing Sensitive Information", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-522", + "lang": "en", + "description": "CWE-522: Insufficiently Protected Credentials", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 5.8, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "CHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/pgEdge/pgedge-go-llm-lib/security/advisories/GHSA-8835-xmqj-354h", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/pgEdge/pgedge-go-llm-lib/security/advisories/GHSA-8835-xmqj-354h" + }, + { + "name": "https://github.com/pgEdge/pgedge-go-llm-lib/pull/26", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-go-llm-lib/pull/26" + }, + { + "name": "https://github.com/pgEdge/pgedge-go-llm-lib/commit/7531a55d368b3a29cd173c792cc4609c4134b076", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-go-llm-lib/commit/7531a55d368b3a29cd173c792cc4609c4134b076" + }, + { + "name": "https://github.com/pgEdge/pgedge-go-llm-lib/commit/8bb9a6380d5f8db0124b51605759897034ad4da1", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-go-llm-lib/commit/8bb9a6380d5f8db0124b51605759897034ad4da1" + }, + { + "name": "https://github.com/pgEdge/pgedge-go-llm-lib/releases/tag/v0.2.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/pgEdge/pgedge-go-llm-lib/releases/tag/v0.2.0" + } + ], + "affected": [ + { + "vendor": "pgEdge", + "product": "pgedge-go-llm-lib", + "versions": [ + { + "version": ">= 0.1.0, < 0.2.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T18:05:20.491Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries, and an HTTP and server-sent events proxy. From 0.1.0 until 0.2.0, GET /v1/health in llm/proxy/handlers.go uses handleHealth to ping providers with the operator's real credentials and returns their error text, while the Authorize hook in llm/proxy/proxy.go permits access by default when the consuming application does not configure it. When a provider rejects the configured credential, a remote caller who can reach the proxy can obtain part of the operator's third-party provider API key from the resulting error. This issue is fixed in version 0.2.0." + } + ], + "source": { + "advisory": "GHSA-8835-xmqj-354h", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/125xxx/CVE-2026-125329.json b/data/2026/125xxx/CVE-2026-125329.json new file mode 100644 index 0000000000..1f3d58098c --- /dev/null +++ b/data/2026/125xxx/CVE-2026-125329.json @@ -0,0 +1,111 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-125329", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-11-09T21:22:55.598Z", + "datePublished": "2026-11-10T18:28:44.663Z", + "dateUpdated": "2026-11-10T18:28:44.663Z" + }, + "containers": { + "cna": { + "title": "Kaneo: Gitea integration access token and webhook secret exposed to any workspace member", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-200", + "lang": "en", + "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", + "type": "CWE" + } + ] + }, + { + "descriptions": [ + { + "cweId": "CWE-522", + "lang": "en", + "description": "CWE-522: Insufficiently Protected Credentials", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV4_0": { + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "baseScore": 8.4, + "baseSeverity": "HIGH", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N", + "version": "4.0" + } + } + ], + "references": [ + { + "name": "https://github.com/usekaneo/kaneo/security/advisories/GHSA-43pc-xpv9-6566", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/usekaneo/kaneo/security/advisories/GHSA-43pc-xpv9-6566" + }, + { + "name": "https://github.com/usekaneo/kaneo/commit/3ac5aa97fd73c930196952eeb0b2fdfd9925ab54", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/usekaneo/kaneo/commit/3ac5aa97fd73c930196952eeb0b2fdfd9925ab54" + }, + { + "name": "https://github.com/usekaneo/kaneo/releases/tag/v2.13.0", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/usekaneo/kaneo/releases/tag/v2.13.0" + } + ], + "affected": [ + { + "vendor": "usekaneo", + "product": "kaneo", + "versions": [ + { + "version": "< 2.13.0", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T18:28:44.663Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "Kaneo is a project management application with boards, Gantt charts, and GitHub integration that can be self-hosted or used as a cloud service. Prior to 2.13.0, GET /api/external-link/task/:taskId returns integration.config to any workspace member, including the viewer role, when a task has a linked Gitea issue or pull request. The plaintext integration.config contains the Gitea accessToken and webhookSecret, allowing the token's granted Gitea actions and forged webhook deliveries that pass HMAC verification. GitHub integrations and installations without a configured Gitea integration are not affected. This issue is fixed in version 2.13.0." + } + ], + "source": { + "advisory": "GHSA-43pc-xpv9-6566", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/12xxx/CVE-2026-12067.json b/data/2026/12xxx/CVE-2026-12067.json index 57c3c27b1a..7f0b3962d0 100644 --- a/data/2026/12xxx/CVE-2026-12067.json +++ b/data/2026/12xxx/CVE-2026-12067.json @@ -8,7 +8,7 @@ "assignerShortName": "GEN", "dateReserved": "2026-06-12T09:00:47.890Z", "datePublished": "2026-11-06T15:57:54.623Z", - "dateUpdated": "2026-11-06T15:57:54.623Z" + "dateUpdated": "2026-11-10T18:34:51.398Z" }, "containers": { "cna": { @@ -165,6 +165,56 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 6.5, + "attackVector": "NETWORK", + "baseSeverity": "MEDIUM", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "integrityImpact": "NONE", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "NONE" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:34:00.891220Z", + "id": "CVE-2026-12067", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:34:51.398Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/62xxx/CVE-2026-62903.json b/data/2026/62xxx/CVE-2026-62903.json new file mode 100644 index 0000000000..88f6cc9b16 --- /dev/null +++ b/data/2026/62xxx/CVE-2026-62903.json @@ -0,0 +1,146 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-62903", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-14T21:25:21.035Z", + "datePublished": "2026-11-10T18:15:27.546Z", + "dateUpdated": "2026-11-10T18:15:27.546Z" + }, + "containers": { + "cna": { + "title": "Microsoft.Data.SqlClient Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_data_sqlclient_6_1:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "6.1.7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_data_sqlclient_7_0:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "7.0.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_data_sqlclient_7_1:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "7.1.0-preview3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft.Data.SqlClient 6.1", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "6.1.7", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.Data.SqlClient 7.0", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "7.0.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft.Data.SqlClient 7.1", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "7.1.0-preview3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-294: Authentication Bypass by Capture-replay", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-294" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:27.546Z" + }, + "references": [ + { + "name": "Microsoft.Data.SqlClient Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62903" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.4, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66801.json b/data/2026/66xxx/CVE-2026-66801.json new file mode 100644 index 0000000000..47fc5f9a83 --- /dev/null +++ b/data/2026/66xxx/CVE-2026-66801.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-66801", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-27T19:02:26.600Z", + "datePublished": "2026-11-10T18:15:11.985Z", + "dateUpdated": "2026-11-10T18:15:11.985Z" + }, + "containers": { + "cna": { + "title": "Microsoft Xbox Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_gdk:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0.0", + "versionEndExcluding": "2610" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft GDK", + "platforms": [ + "Xbox" + ], + "versions": [ + { + "version": "1.0.0.0", + "lessThan": "2610", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:11.985Z" + }, + "references": [ + { + "name": "Microsoft Xbox Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66801" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66813.json b/data/2026/66xxx/CVE-2026-66813.json new file mode 100644 index 0000000000..166927e762 --- /dev/null +++ b/data/2026/66xxx/CVE-2026-66813.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-66813", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-27T19:02:26.601Z", + "datePublished": "2026-11-10T18:16:49.019Z", + "dateUpdated": "2026-11-10T18:16:49.019Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:49.019Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66813" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/66xxx/CVE-2026-66982.json b/data/2026/66xxx/CVE-2026-66982.json index 423976b591..a49f397844 100644 --- a/data/2026/66xxx/CVE-2026-66982.json +++ b/data/2026/66xxx/CVE-2026-66982.json @@ -8,7 +8,7 @@ "assignerShortName": "HCL", "dateReserved": "2026-07-28T13:21:51.896Z", "datePublished": "2026-11-06T15:36:20.758Z", - "dateUpdated": "2026-11-06T15:36:20.758Z" + "dateUpdated": "2026-11-10T18:19:41.221Z" }, "containers": { "cna": { @@ -92,6 +92,40 @@ "x_generator": { "engine": "Vulnogram 1.0.0" } - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:19:29.845059Z", + "id": "CVE-2026-66982", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:19:41.221Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67372.json b/data/2026/67xxx/CVE-2026-67372.json new file mode 100644 index 0000000000..31ec735e6b --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67372.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67372", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T14:57:03.840Z", + "datePublished": "2026-11-10T18:16:38.380Z", + "dateUpdated": "2026-11-10T18:16:38.380Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:38.380Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67372" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67374.json b/data/2026/67xxx/CVE-2026-67374.json new file mode 100644 index 0000000000..fda69ca86c --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67374.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67374", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T14:57:03.841Z", + "datePublished": "2026-11-10T18:17:49.375Z", + "dateUpdated": "2026-11-10T18:17:49.375Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:49.375Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67374" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67375.json b/data/2026/67xxx/CVE-2026-67375.json new file mode 100644 index 0000000000..94a8f1c37e --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67375.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67375", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T14:57:03.841Z", + "datePublished": "2026-11-10T18:17:50.413Z", + "dateUpdated": "2026-11-10T18:17:50.413Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:50.413Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67375" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67382.json b/data/2026/67xxx/CVE-2026-67382.json new file mode 100644 index 0000000000..e8cce9c470 --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67382.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67382", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T14:57:03.841Z", + "datePublished": "2026-11-10T18:16:47.975Z", + "dateUpdated": "2026-11-10T18:16:47.975Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:47.975Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67382" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67387.json b/data/2026/67xxx/CVE-2026-67387.json new file mode 100644 index 0000000000..c0c46beb9c --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67387.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67387", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T14:57:03.842Z", + "datePublished": "2026-11-10T18:16:40.224Z", + "dateUpdated": "2026-11-10T18:16:40.224Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:40.224Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67387" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67391.json b/data/2026/67xxx/CVE-2026-67391.json new file mode 100644 index 0000000000..dd8363ef4b --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67391.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67391", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T14:57:03.842Z", + "datePublished": "2026-11-10T18:15:37.335Z", + "dateUpdated": "2026-11-10T18:15:37.335Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:37.335Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67391" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67632.json b/data/2026/67xxx/CVE-2026-67632.json new file mode 100644 index 0000000000..36ee45f0bd --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67632.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67632", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T22:49:19.796Z", + "datePublished": "2026-11-10T18:16:49.628Z", + "dateUpdated": "2026-11-10T18:16:49.628Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:49.628Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67632" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67637.json b/data/2026/67xxx/CVE-2026-67637.json new file mode 100644 index 0000000000..cef5ab9b58 --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67637.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67637", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T22:49:19.796Z", + "datePublished": "2026-11-10T18:16:48.572Z", + "dateUpdated": "2026-11-10T18:16:48.572Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:48.572Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67637" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/67xxx/CVE-2026-67646.json b/data/2026/67xxx/CVE-2026-67646.json new file mode 100644 index 0000000000..d30b2f6655 --- /dev/null +++ b/data/2026/67xxx/CVE-2026-67646.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-67646", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-29T22:49:19.797Z", + "datePublished": "2026-11-10T18:16:39.701Z", + "dateUpdated": "2026-11-10T18:16:39.701Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:39.701Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67646" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/68xxx/CVE-2026-68783.json b/data/2026/68xxx/CVE-2026-68783.json new file mode 100644 index 0000000000..0c61a4a0b8 --- /dev/null +++ b/data/2026/68xxx/CVE-2026-68783.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-68783", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-07-31T16:33:08.215Z", + "datePublished": "2026-11-10T18:17:49.888Z", + "dateUpdated": "2026-11-10T18:17:49.888Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:49.888Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68783" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/69xxx/CVE-2026-69327.json b/data/2026/69xxx/CVE-2026-69327.json new file mode 100644 index 0000000000..e686352aa2 --- /dev/null +++ b/data/2026/69xxx/CVE-2026-69327.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-69327", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T20:49:42.867Z", + "datePublished": "2026-11-10T18:15:37.865Z", + "dateUpdated": "2026-11-10T18:15:37.865Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Services Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:37.865Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Services Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69327" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.4, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/69xxx/CVE-2026-69565.json b/data/2026/69xxx/CVE-2026-69565.json new file mode 100644 index 0000000000..76077111ea --- /dev/null +++ b/data/2026/69xxx/CVE-2026-69565.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-69565", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T21:15:56.835Z", + "datePublished": "2026-11-10T18:15:36.835Z", + "dateUpdated": "2026-11-10T18:15:36.835Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Services Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:36.835Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Services Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69565" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/69xxx/CVE-2026-69901.json b/data/2026/69xxx/CVE-2026-69901.json new file mode 100644 index 0000000000..9165937acb --- /dev/null +++ b/data/2026/69xxx/CVE-2026-69901.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-69901", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T22:56:39.492Z", + "datePublished": "2026-11-10T18:19:19.135Z", + "dateUpdated": "2026-11-10T18:19:19.135Z" + }, + "containers": { + "cna": { + "title": "Microsoft Teams for Android Spoofing Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1416/1.0.0.2026202302" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft Teams for Android", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1416/1.0.0.2026202302", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-346: Origin Validation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-346" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:19.135Z" + }, + "references": [ + { + "name": "Microsoft Teams for Android Spoofing Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69901" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/6xxx/CVE-2026-6245.json b/data/2026/6xxx/CVE-2026-6245.json index afb4cf3f28..bd6e3380bc 100644 --- a/data/2026/6xxx/CVE-2026-6245.json +++ b/data/2026/6xxx/CVE-2026-6245.json @@ -8,7 +8,7 @@ "assignerShortName": "redhat", "dateReserved": "2026-04-13T17:31:43.481Z", "datePublished": "2026-04-15T18:35:19.401Z", - "dateUpdated": "2026-11-10T12:55:02.548Z" + "dateUpdated": "2026-11-10T18:14:50.699Z" }, "containers": { "cna": { @@ -66,6 +66,46 @@ "cpe:/o:redhat:enterprise_linux:10.3" ] }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "sssd", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:2.9.9-3.el9", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux:9::appstream", + "cpe:/a:redhat:enterprise_linux:9::crb", + "cpe:/o:redhat:enterprise_linux:9::baseos" + ] + }, + { + "vendor": "Red Hat", + "product": "Red Hat Enterprise Linux 9", + "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", + "packageName": "sssd", + "defaultStatus": "affected", + "versions": [ + { + "version": "0:2.9.9-3.el9", + "lessThan": "*", + "versionType": "rpm", + "status": "unaffected" + } + ], + "cpes": [ + "cpe:/a:redhat:enterprise_linux:9::appstream", + "cpe:/a:redhat:enterprise_linux:9::crb", + "cpe:/o:redhat:enterprise_linux:9::baseos" + ] + }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", @@ -96,16 +136,6 @@ "cpe:/a:redhat:enterprise_linux:8" ] }, - { - "vendor": "Red Hat", - "product": "Red Hat Enterprise Linux 9", - "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", - "packageName": "sssd", - "defaultStatus": "affected", - "cpes": [ - "cpe:/a:redhat:enterprise_linux:9" - ] - }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", @@ -136,6 +166,14 @@ "x_refsource_REDHAT" ] }, + { + "url": "https://access.redhat.com/errata/RHSA-2026:97438", + "name": "RHSA-2026:97438", + "tags": [ + "vendor-advisory", + "x_refsource_REDHAT" + ] + }, { "url": "https://access.redhat.com/security/cve/CVE-2026-6245", "tags": [ @@ -187,7 +225,7 @@ "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", - "dateUpdated": "2026-11-10T12:55:02.548Z" + "dateUpdated": "2026-11-10T18:14:50.699Z" }, "x_generator": { "engine": "cvelib 1.8.0" diff --git a/data/2026/70xxx/CVE-2026-70003.json b/data/2026/70xxx/CVE-2026-70003.json new file mode 100644 index 0000000000..a47b2f2e98 --- /dev/null +++ b/data/2026/70xxx/CVE-2026-70003.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-70003", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T23:07:44.322Z", + "datePublished": "2026-11-10T18:20:09.069Z", + "dateUpdated": "2026-11-10T18:20:09.069Z" + }, + "containers": { + "cna": { + "title": "JDBC Driver for SQL Server Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:jdbc_driver_for_sql_server_13.4:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "13.6.0" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft JDBC Driver for SQL Server 13.4", + "versions": [ + { + "version": "1.0.0", + "lessThan": "13.6.0", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to bypass a security feature over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-347: Improper Verification of Cryptographic Signature", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-347" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:09.069Z" + }, + "references": [ + { + "name": "JDBC Driver for SQL Server Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70003" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.7, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/70xxx/CVE-2026-70094.json b/data/2026/70xxx/CVE-2026-70094.json new file mode 100644 index 0000000000..8e4b904020 --- /dev/null +++ b/data/2026/70xxx/CVE-2026-70094.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-70094", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T23:23:44.268Z", + "datePublished": "2026-11-10T18:16:52.358Z", + "dateUpdated": "2026-11-10T18:16:52.358Z" + }, + "containers": { + "cna": { + "title": "Visual Studio Code Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.145.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Visual Studio Code", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.145.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-426: Untrusted Search Path", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-426" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:52.358Z" + }, + "references": [ + { + "name": "Visual Studio Code Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70094" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/70xxx/CVE-2026-70120.json b/data/2026/70xxx/CVE-2026-70120.json new file mode 100644 index 0000000000..54ddbd39d9 --- /dev/null +++ b/data/2026/70xxx/CVE-2026-70120.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-70120", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T23:28:38.302Z", + "datePublished": "2026-11-10T18:15:40.991Z", + "dateUpdated": "2026-11-10T18:15:40.991Z" + }, + "containers": { + "cna": { + "title": "Microsoft Bluetooth Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:40.991Z" + }, + "references": [ + { + "name": "Microsoft Bluetooth Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70120" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/70xxx/CVE-2026-70182.json b/data/2026/70xxx/CVE-2026-70182.json new file mode 100644 index 0000000000..ae4e15f1b4 --- /dev/null +++ b/data/2026/70xxx/CVE-2026-70182.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-70182", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T23:48:30.860Z", + "datePublished": "2026-11-10T18:20:03.922Z", + "dateUpdated": "2026-11-10T18:20:03.922Z" + }, + "containers": { + "cna": { + "title": "Windows Bind Filter Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:03.922Z" + }, + "references": [ + { + "name": "Windows Bind Filter Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70182" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/70xxx/CVE-2026-70231.json b/data/2026/70xxx/CVE-2026-70231.json new file mode 100644 index 0000000000..266c9cb453 --- /dev/null +++ b/data/2026/70xxx/CVE-2026-70231.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-70231", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T23:54:57.810Z", + "datePublished": "2026-11-10T18:15:39.390Z", + "dateUpdated": "2026-11-10T18:15:39.390Z" + }, + "containers": { + "cna": { + "title": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:39.390Z" + }, + "references": [ + { + "name": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70231" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/70xxx/CVE-2026-70240.json b/data/2026/70xxx/CVE-2026-70240.json new file mode 100644 index 0000000000..07d4a2d00b --- /dev/null +++ b/data/2026/70xxx/CVE-2026-70240.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-70240", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-03T23:54:57.811Z", + "datePublished": "2026-11-10T18:15:41.443Z", + "dateUpdated": "2026-11-10T18:15:41.443Z" + }, + "containers": { + "cna": { + "title": "Windows Kerberos Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:41.443Z" + }, + "references": [ + { + "name": "Windows Kerberos Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70240" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/72xxx/CVE-2026-72998.json b/data/2026/72xxx/CVE-2026-72998.json new file mode 100644 index 0000000000..3d5bf07960 --- /dev/null +++ b/data/2026/72xxx/CVE-2026-72998.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-72998", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-10T18:38:17.058Z", + "datePublished": "2026-11-10T18:16:50.233Z", + "dateUpdated": "2026-11-10T18:16:50.233Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:50.233Z" + }, + "references": [ + { + "name": "Windows DHCP Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72998" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/79xxx/CVE-2026-79914.json b/data/2026/79xxx/CVE-2026-79914.json new file mode 100644 index 0000000000..d5129e80ad --- /dev/null +++ b/data/2026/79xxx/CVE-2026-79914.json @@ -0,0 +1,91 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-79914", + "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "state": "PUBLISHED", + "assignerShortName": "GitHub_M", + "dateReserved": "2026-08-25T14:59:32.746Z", + "datePublished": "2026-11-10T17:56:36.594Z", + "dateUpdated": "2026-11-10T17:56:36.594Z" + }, + "containers": { + "cna": { + "title": "NocoBase: SSRF in customRequests:send via runtime options.url override", + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-918", + "lang": "en", + "description": "CWE-918: Server-Side Request Forgery", + "type": "CWE" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "version": "3.1" + } + } + ], + "references": [ + { + "name": "https://github.com/nocobase/nocobase/security/advisories/GHSA-wrr5-j383-f7h2", + "tags": [ + "x_refsource_CONFIRM" + ], + "url": "https://github.com/nocobase/nocobase/security/advisories/GHSA-wrr5-j383-f7h2" + }, + { + "name": "https://github.com/nocobase/nocobase/commit/037dade8592fbab4324107285463f92b45aaa2ff", + "tags": [ + "x_refsource_MISC" + ], + "url": "https://github.com/nocobase/nocobase/commit/037dade8592fbab4324107285463f92b45aaa2ff" + } + ], + "affected": [ + { + "vendor": "nocobase", + "product": "nocobase", + "versions": [ + { + "version": ">= 2.1.0, < 2.1.15", + "status": "affected" + } + ] + } + ], + "providerMetadata": { + "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", + "shortName": "GitHub_M", + "dateUpdated": "2026-11-10T17:56:36.594Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Versions 2.1.0 through 2.1.14 contain a server-side request forgery vulnerability in the customRequests:send endpoint. A low-privileged authenticated user can override the stored request URL at runtime using options.url, causing the NocoBase server to send requests to attacker-controlled or internal destinations. Exploitation could expose internal services, Docker host gateways, or cloud metadata endpoints and allow the server to be used as a trusted network proxy. This issue has been fixed in version 2.1.15." + } + ], + "source": { + "advisory": "GHSA-wrr5-j383-f7h2", + "discovery": "UNKNOWN" + } + } + } +} \ No newline at end of file diff --git a/data/2026/80xxx/CVE-2026-80094.json b/data/2026/80xxx/CVE-2026-80094.json new file mode 100644 index 0000000000..e8c507b3b1 --- /dev/null +++ b/data/2026/80xxx/CVE-2026-80094.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-80094", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-25T18:37:59.829Z", + "datePublished": "2026-11-10T18:21:41.528Z", + "dateUpdated": "2026-11-10T18:21:41.528Z" + }, + "containers": { + "cna": { + "title": "Remote Desktop Gateway Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:41.528Z" + }, + "references": [ + { + "name": "Remote Desktop Gateway Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80094" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/80xxx/CVE-2026-80095.json b/data/2026/80xxx/CVE-2026-80095.json new file mode 100644 index 0000000000..72951fa9f1 --- /dev/null +++ b/data/2026/80xxx/CVE-2026-80095.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-80095", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-25T18:37:59.830Z", + "datePublished": "2026-11-10T18:20:08.534Z", + "dateUpdated": "2026-11-10T18:20:08.534Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20278" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20278", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-79" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:08.534Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80095" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/80xxx/CVE-2026-80301.json b/data/2026/80xxx/CVE-2026-80301.json index 76a2f14f3a..8f0eae7d47 100644 --- a/data/2026/80xxx/CVE-2026-80301.json +++ b/data/2026/80xxx/CVE-2026-80301.json @@ -8,7 +8,7 @@ "assignerShortName": "GEN", "dateReserved": "2026-08-26T08:11:54.260Z", "datePublished": "2026-11-06T16:01:42.131Z", - "dateUpdated": "2026-11-06T16:01:42.131Z" + "dateUpdated": "2026-11-10T18:33:22.382Z" }, "containers": { "cna": { @@ -165,6 +165,56 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "CHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:29:20.862943Z", + "id": "CVE-2026-80301", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:33:22.382Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/80xxx/CVE-2026-80302.json b/data/2026/80xxx/CVE-2026-80302.json index 6582a68566..2788242884 100644 --- a/data/2026/80xxx/CVE-2026-80302.json +++ b/data/2026/80xxx/CVE-2026-80302.json @@ -8,7 +8,7 @@ "assignerShortName": "GEN", "dateReserved": "2026-08-26T08:11:54.260Z", "datePublished": "2026-11-06T16:00:46.942Z", - "dateUpdated": "2026-11-06T16:00:46.942Z" + "dateUpdated": "2026-11-10T18:32:31.903Z" }, "containers": { "cna": { @@ -165,6 +165,56 @@ "x_generator": { "engine": "Vulnogram 1.0.5" } - } + }, + "adp": [ + { + "metrics": [ + { + "cvssV3_1": { + "scope": "CHANGED", + "version": "3.1", + "baseScore": 8.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:30:28.661028Z", + "id": "CVE-2026-80302", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:32:31.903Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/81xxx/CVE-2026-81384.json b/data/2026/81xxx/CVE-2026-81384.json new file mode 100644 index 0000000000..38fb6bdbdf --- /dev/null +++ b/data/2026/81xxx/CVE-2026-81384.json @@ -0,0 +1,146 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-81384", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-26T18:46:26.214Z", + "datePublished": "2026-11-10T18:15:38.372Z", + "dateUpdated": "2026-11-10T18:15:38.372Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:38.372Z" + }, + "references": [ + { + "name": "Windows DNS Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81384" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/83xxx/CVE-2026-83563.json b/data/2026/83xxx/CVE-2026-83563.json new file mode 100644 index 0000000000..153f6dd586 --- /dev/null +++ b/data/2026/83xxx/CVE-2026-83563.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-83563", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-31T19:05:20.870Z", + "datePublished": "2026-11-10T18:20:03.321Z", + "dateUpdated": "2026-11-10T18:20:03.321Z" + }, + "containers": { + "cna": { + "title": "Winlogon Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:03.321Z" + }, + "references": [ + { + "name": "Winlogon Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83563" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/83xxx/CVE-2026-83684.json b/data/2026/83xxx/CVE-2026-83684.json new file mode 100644 index 0000000000..acbaa27888 --- /dev/null +++ b/data/2026/83xxx/CVE-2026-83684.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-83684", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-31T22:35:53.585Z", + "datePublished": "2026-11-10T18:15:25.923Z", + "dateUpdated": "2026-11-10T18:15:25.923Z" + }, + "containers": { + "cna": { + "title": "Windows iSCSI Target Service Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:25.923Z" + }, + "references": [ + { + "name": "Windows iSCSI Target Service Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83684" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/83xxx/CVE-2026-83894.json b/data/2026/83xxx/CVE-2026-83894.json new file mode 100644 index 0000000000..9a30f170be --- /dev/null +++ b/data/2026/83xxx/CVE-2026-83894.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-83894", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-31T23:21:53.300Z", + "datePublished": "2026-11-10T18:15:16.555Z", + "dateUpdated": "2026-11-10T18:15:16.555Z" + }, + "containers": { + "cna": { + "title": "RPC Runtime Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:16.555Z" + }, + "references": [ + { + "name": "RPC Runtime Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83894" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/83xxx/CVE-2026-83953.json b/data/2026/83xxx/CVE-2026-83953.json new file mode 100644 index 0000000000..92d13b5fb6 --- /dev/null +++ b/data/2026/83xxx/CVE-2026-83953.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-83953", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-08-31T23:40:59.642Z", + "datePublished": "2026-11-10T18:16:50.751Z", + "dateUpdated": "2026-11-10T18:16:50.751Z" + }, + "containers": { + "cna": { + "title": "GitHub Copilot for Jetbrains Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:gihub_copilot_plugin_for_jetbrains_ides:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "1.17.0-251" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "GitHub Copilot Plugin for JetBrains IDEs", + "versions": [ + { + "version": "1.0.0", + "lessThan": "1.17.0-251", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-77" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:50.751Z" + }, + "references": [ + { + "name": "GitHub Copilot for Jetbrains Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83953" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/84xxx/CVE-2026-84004.json b/data/2026/84xxx/CVE-2026-84004.json new file mode 100644 index 0000000000..cd89bf51e8 --- /dev/null +++ b/data/2026/84xxx/CVE-2026-84004.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-84004", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-01T01:16:35.985Z", + "datePublished": "2026-11-10T18:15:17.524Z", + "dateUpdated": "2026-11-10T18:15:17.524Z" + }, + "containers": { + "cna": { + "title": "AMD Zen Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1037: Processor Optimization Removal or Modification of Security-critical Code", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1037" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:17.524Z" + }, + "references": [ + { + "name": "AMD Zen Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84004" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/84xxx/CVE-2026-84005.json b/data/2026/84xxx/CVE-2026-84005.json new file mode 100644 index 0000000000..5b5c21482a --- /dev/null +++ b/data/2026/84xxx/CVE-2026-84005.json @@ -0,0 +1,340 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-84005", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-01T01:16:35.985Z", + "datePublished": "2026-11-10T18:15:17.066Z", + "dateUpdated": "2026-11-10T18:15:17.066Z" + }, + "containers": { + "cna": { + "title": "AMD Zen Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1037: Processor Optimization Removal or Modification of Security-critical Code", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1037" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:17.066Z" + }, + "references": [ + { + "name": "AMD Zen Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84005" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/84xxx/CVE-2026-84010.json b/data/2026/84xxx/CVE-2026-84010.json new file mode 100644 index 0000000000..ac1961ccef --- /dev/null +++ b/data/2026/84xxx/CVE-2026-84010.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-84010", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-01T01:16:35.985Z", + "datePublished": "2026-11-10T18:21:50.685Z", + "dateUpdated": "2026-11-10T18:21:50.685Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-749: Exposed Dangerous Method or Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-749" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:21:50.685Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84010" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/84xxx/CVE-2026-84473.json b/data/2026/84xxx/CVE-2026-84473.json index 7eaee75c32..390a10b3f3 100644 --- a/data/2026/84xxx/CVE-2026-84473.json +++ b/data/2026/84xxx/CVE-2026-84473.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-09-01T20:18:55.747Z", "datePublished": "2026-11-06T18:25:49.272Z", - "dateUpdated": "2026-11-06T18:25:49.272Z" + "dateUpdated": "2026-11-10T18:24:26.976Z" }, "containers": { "cna": { @@ -69,6 +69,74 @@ "shortName": "certcc", "dateUpdated": "2026-11-06T18:25:49.272Z" } - } + }, + "adp": [ + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-307", + "lang": "en", + "description": "CWE-307 Improper Restriction of Excessive Authentication Attempts" + }, + { + "type": "CWE", + "cweId": "CWE-288", + "lang": "en", + "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 9.8, + "attackVector": "NETWORK", + "baseSeverity": "CRITICAL", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "NONE", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:23:52.386153Z", + "id": "CVE-2026-84473", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:24:26.976Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85801.json b/data/2026/85xxx/CVE-2026-85801.json new file mode 100644 index 0000000000..0913a89525 --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85801.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85801", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:08:54.993Z", + "datePublished": "2026-11-10T18:15:25.327Z", + "dateUpdated": "2026-11-10T18:15:25.327Z" + }, + "containers": { + "cna": { + "title": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:25.327Z" + }, + "references": [ + { + "name": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85801" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85838.json b/data/2026/85xxx/CVE-2026-85838.json new file mode 100644 index 0000000000..e221d88028 --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85838.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85838", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:12:22.900Z", + "datePublished": "2026-11-10T18:15:28.138Z", + "dateUpdated": "2026-11-10T18:15:28.138Z" + }, + "containers": { + "cna": { + "title": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:28.138Z" + }, + "references": [ + { + "name": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85838" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85839.json b/data/2026/85xxx/CVE-2026-85839.json new file mode 100644 index 0000000000..699db05b9b --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85839.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85839", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:12:22.900Z", + "datePublished": "2026-11-10T18:15:28.588Z", + "dateUpdated": "2026-11-10T18:15:28.588Z" + }, + "containers": { + "cna": { + "title": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:28.588Z" + }, + "references": [ + { + "name": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85839" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85844.json b/data/2026/85xxx/CVE-2026-85844.json new file mode 100644 index 0000000000..dd7c0f57e2 --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85844.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85844", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:15:10.737Z", + "datePublished": "2026-11-10T18:20:02.722Z", + "dateUpdated": "2026-11-10T18:20:02.722Z" + }, + "containers": { + "cna": { + "title": "Windows Kerberos Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-288" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:02.722Z" + }, + "references": [ + { + "name": "Windows Kerberos Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85844" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85862.json b/data/2026/85xxx/CVE-2026-85862.json new file mode 100644 index 0000000000..42a3c11b81 --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85862.json @@ -0,0 +1,462 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85862", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:15:10.738Z", + "datePublished": "2026-11-10T18:15:38.882Z", + "dateUpdated": "2026-11-10T18:15:38.882Z" + }, + "containers": { + "cna": { + "title": "Windows Error Reporting Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:38.882Z" + }, + "references": [ + { + "name": "Windows Error Reporting Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85862" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85907.json b/data/2026/85xxx/CVE-2026-85907.json new file mode 100644 index 0000000000..e732e28bfa --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85907.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85907", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:21:15.992Z", + "datePublished": "2026-11-10T18:16:51.279Z", + "dateUpdated": "2026-11-10T18:16:51.279Z" + }, + "containers": { + "cna": { + "title": "Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-522: Insufficiently Protected Credentials", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-522" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:51.279Z" + }, + "references": [ + { + "name": "Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85907" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.4, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85923.json b/data/2026/85xxx/CVE-2026-85923.json new file mode 100644 index 0000000000..da1f646f86 --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85923.json @@ -0,0 +1,101 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85923", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:24:41.250Z", + "datePublished": "2026-11-10T18:16:51.830Z", + "dateUpdated": "2026-11-10T18:16:51.830Z" + }, + "containers": { + "cna": { + "title": "Azure DevOps Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_devops_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.0.0", + "versionEndExcluding": "Patch 10" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Azure DevOps Server", + "versions": [ + { + "version": "1.0.0", + "lessThan": "Patch 10", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-639: Authorization Bypass Through User-Controlled Key", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-639" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:51.830Z" + }, + "references": [ + { + "name": "Azure DevOps Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85923" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85929.json b/data/2026/85xxx/CVE-2026-85929.json new file mode 100644 index 0000000000..5d4f91a883 --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85929.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85929", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:24:41.251Z", + "datePublished": "2026-11-10T18:17:48.862Z", + "dateUpdated": "2026-11-10T18:17:48.862Z" + }, + "containers": { + "cna": { + "title": "Microsoft Brokering File System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-732: Incorrect Permission Assignment for Critical Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-732" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:48.862Z" + }, + "references": [ + { + "name": "Microsoft Brokering File System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85929" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/85xxx/CVE-2026-85942.json b/data/2026/85xxx/CVE-2026-85942.json new file mode 100644 index 0000000000..d4e5dce46c --- /dev/null +++ b/data/2026/85xxx/CVE-2026-85942.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-85942", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-04T18:24:41.252Z", + "datePublished": "2026-11-10T18:19:59.556Z", + "dateUpdated": "2026-11-10T18:19:59.556Z" + }, + "containers": { + "cna": { + "title": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:19:59.556Z" + }, + "references": [ + { + "name": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85942" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88111.json b/data/2026/88xxx/CVE-2026-88111.json new file mode 100644 index 0000000000..f6581573fb --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88111.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88111", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T21:51:51.954Z", + "datePublished": "2026-11-10T18:20:07.517Z", + "dateUpdated": "2026-11-10T18:20:07.517Z" + }, + "containers": { + "cna": { + "title": "SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:07.517Z" + }, + "references": [ + { + "name": "SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88111" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88176.json b/data/2026/88xxx/CVE-2026-88176.json new file mode 100644 index 0000000000..1e5f6149f8 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88176.json @@ -0,0 +1,104 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88176", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T21:59:30.884Z", + "datePublished": "2026-11-10T18:15:18.109Z", + "dateUpdated": "2026-11-10T18:15:18.109Z" + }, + "containers": { + "cna": { + "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.20326.20190" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SharePoint Server Subscription Edition", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.20326.20190", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:18.109Z" + }, + "references": [ + { + "name": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88176" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88187.json b/data/2026/88xxx/CVE-2026-88187.json new file mode 100644 index 0000000000..62f1171a22 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88187.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88187", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T21:59:30.885Z", + "datePublished": "2026-11-10T18:16:52.814Z", + "dateUpdated": "2026-11-10T18:16:52.814Z" + }, + "containers": { + "cna": { + "title": "Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:52.814Z" + }, + "references": [ + { + "name": "Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88187" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88211.json b/data/2026/88xxx/CVE-2026-88211.json new file mode 100644 index 0000000000..ac21606bd6 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88211.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88211", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.385Z", + "datePublished": "2026-11-10T18:16:53.400Z", + "dateUpdated": "2026-11-10T18:16:53.400Z" + }, + "containers": { + "cna": { + "title": "Graphic Fonts Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:53.400Z" + }, + "references": [ + { + "name": "Graphic Fonts Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88211" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.7, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88212.json b/data/2026/88xxx/CVE-2026-88212.json new file mode 100644 index 0000000000..ceadfd9475 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88212.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88212", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.385Z", + "datePublished": "2026-11-10T18:20:10.363Z", + "dateUpdated": "2026-11-10T18:20:10.363Z" + }, + "containers": { + "cna": { + "title": "Windows Network Address Translation (NAT) Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:10.363Z" + }, + "references": [ + { + "name": "Windows Network Address Translation (NAT) Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88212" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88213.json b/data/2026/88xxx/CVE-2026-88213.json new file mode 100644 index 0000000000..76d2fa0868 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88213.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88213", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.385Z", + "datePublished": "2026-11-10T18:16:53.854Z", + "dateUpdated": "2026-11-10T18:16:53.854Z" + }, + "containers": { + "cna": { + "title": "Windows Bluetooth Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-197: Numeric Truncation Error", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-197" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:53.854Z" + }, + "references": [ + { + "name": "Windows Bluetooth Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88213" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88215.json b/data/2026/88xxx/CVE-2026-88215.json new file mode 100644 index 0000000000..69fcbc349a --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88215.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88215", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.386Z", + "datePublished": "2026-11-10T18:16:54.297Z", + "dateUpdated": "2026-11-10T18:16:54.297Z" + }, + "containers": { + "cna": { + "title": "Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:54.297Z" + }, + "references": [ + { + "name": "Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88215" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88216.json b/data/2026/88xxx/CVE-2026-88216.json new file mode 100644 index 0000000000..c26d105bb6 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88216.json @@ -0,0 +1,236 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88216", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.386Z", + "datePublished": "2026-11-10T18:15:42.071Z", + "dateUpdated": "2026-11-10T18:15:42.071Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-367" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:42.071Z" + }, + "references": [ + { + "name": "Windows DHCP Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88216" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88217.json b/data/2026/88xxx/CVE-2026-88217.json new file mode 100644 index 0000000000..5c045e223c --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88217.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88217", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.386Z", + "datePublished": "2026-11-10T18:16:54.826Z", + "dateUpdated": "2026-11-10T18:16:54.826Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:54.826Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88217" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88218.json b/data/2026/88xxx/CVE-2026-88218.json new file mode 100644 index 0000000000..de61942f50 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88218.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88218", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.386Z", + "datePublished": "2026-11-10T18:15:42.593Z", + "dateUpdated": "2026-11-10T18:15:42.593Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows DNS allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:42.593Z" + }, + "references": [ + { + "name": "Windows DNS Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88218" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88220.json b/data/2026/88xxx/CVE-2026-88220.json new file mode 100644 index 0000000000..0865c1e574 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88220.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88220", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.386Z", + "datePublished": "2026-11-10T18:15:43.470Z", + "dateUpdated": "2026-11-10T18:15:43.470Z" + }, + "containers": { + "cna": { + "title": "Windows Performance Counters Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:43.470Z" + }, + "references": [ + { + "name": "Windows Performance Counters Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88220" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88221.json b/data/2026/88xxx/CVE-2026-88221.json new file mode 100644 index 0000000000..1751b12534 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88221.json @@ -0,0 +1,281 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88221", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.386Z", + "datePublished": "2026-11-10T18:15:44.064Z", + "dateUpdated": "2026-11-10T18:15:44.064Z" + }, + "containers": { + "cna": { + "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:44.064Z" + }, + "references": [ + { + "name": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88221" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88222.json b/data/2026/88xxx/CVE-2026-88222.json new file mode 100644 index 0000000000..e7cf91e65e --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88222.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88222", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.386Z", + "datePublished": "2026-11-10T18:20:10.868Z", + "dateUpdated": "2026-11-10T18:20:10.868Z" + }, + "containers": { + "cna": { + "title": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:10.868Z" + }, + "references": [ + { + "name": "Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88222" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88224.json b/data/2026/88xxx/CVE-2026-88224.json new file mode 100644 index 0000000000..64f25db22c --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88224.json @@ -0,0 +1,211 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88224", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:01:13.386Z", + "datePublished": "2026-11-10T18:16:55.282Z", + "dateUpdated": "2026-11-10T18:16:55.282Z" + }, + "containers": { + "cna": { + "title": "Windows AppX Deployment Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:55.282Z" + }, + "references": [ + { + "name": "Windows AppX Deployment Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88224" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88227.json b/data/2026/88xxx/CVE-2026-88227.json new file mode 100644 index 0000000000..043b303f8d --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88227.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88227", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.670Z", + "datePublished": "2026-11-10T18:15:44.510Z", + "dateUpdated": "2026-11-10T18:15:44.510Z" + }, + "containers": { + "cna": { + "title": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:44.510Z" + }, + "references": [ + { + "name": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88227" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88228.json b/data/2026/88xxx/CVE-2026-88228.json new file mode 100644 index 0000000000..b1756786fe --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88228.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88228", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.670Z", + "datePublished": "2026-11-10T18:15:45.043Z", + "dateUpdated": "2026-11-10T18:15:45.043Z" + }, + "containers": { + "cna": { + "title": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:45.043Z" + }, + "references": [ + { + "name": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88228" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88229.json b/data/2026/88xxx/CVE-2026-88229.json new file mode 100644 index 0000000000..5985f9f183 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88229.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88229", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.670Z", + "datePublished": "2026-11-10T18:16:55.870Z", + "dateUpdated": "2026-11-10T18:16:55.870Z" + }, + "containers": { + "cna": { + "title": "Windows Media Player Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:55.870Z" + }, + "references": [ + { + "name": "Windows Media Player Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88229" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88230.json b/data/2026/88xxx/CVE-2026-88230.json new file mode 100644 index 0000000000..24bd27e044 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88230.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88230", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:15:45.508Z", + "dateUpdated": "2026-11-10T18:15:45.508Z" + }, + "containers": { + "cna": { + "title": "Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:45.508Z" + }, + "references": [ + { + "name": "Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88230" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88231.json b/data/2026/88xxx/CVE-2026-88231.json new file mode 100644 index 0000000000..2cface7659 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88231.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88231", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:15:46.031Z", + "dateUpdated": "2026-11-10T18:15:46.031Z" + }, + "containers": { + "cna": { + "title": "Windows iSCSI Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:46.031Z" + }, + "references": [ + { + "name": "Windows iSCSI Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88231" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.7, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88232.json b/data/2026/88xxx/CVE-2026-88232.json new file mode 100644 index 0000000000..175daad8a4 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88232.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88232", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:15:46.560Z", + "dateUpdated": "2026-11-10T18:15:46.560Z" + }, + "containers": { + "cna": { + "title": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:46.560Z" + }, + "references": [ + { + "name": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88232" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88233.json b/data/2026/88xxx/CVE-2026-88233.json new file mode 100644 index 0000000000..36119193bd --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88233.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88233", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:15:47.005Z", + "dateUpdated": "2026-11-10T18:15:47.005Z" + }, + "containers": { + "cna": { + "title": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-283: Unverified Ownership", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-283" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:47.005Z" + }, + "references": [ + { + "name": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88233" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88234.json b/data/2026/88xxx/CVE-2026-88234.json new file mode 100644 index 0000000000..04a307cbdc --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88234.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88234", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:16:56.383Z", + "dateUpdated": "2026-11-10T18:16:56.383Z" + }, + "containers": { + "cna": { + "title": "Windows iSCSI Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:56.383Z" + }, + "references": [ + { + "name": "Windows iSCSI Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88234" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88235.json b/data/2026/88xxx/CVE-2026-88235.json new file mode 100644 index 0000000000..ec4962ec8e --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88235.json @@ -0,0 +1,320 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88235", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:15:47.444Z", + "dateUpdated": "2026-11-10T18:15:47.444Z" + }, + "containers": { + "cna": { + "title": "Servicing Stack Updates Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9681" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9681" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9681" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9681", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9681", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9681", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-441" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:47.444Z" + }, + "references": [ + { + "name": "Servicing Stack Updates Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88235" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88236.json b/data/2026/88xxx/CVE-2026-88236.json new file mode 100644 index 0000000000..778662244c --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88236.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88236", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:15:47.955Z", + "dateUpdated": "2026-11-10T18:15:47.955Z" + }, + "containers": { + "cna": { + "title": "Microsoft QUIC Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:47.955Z" + }, + "references": [ + { + "name": "Microsoft QUIC Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88236" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88237.json b/data/2026/88xxx/CVE-2026-88237.json new file mode 100644 index 0000000000..f9304510ba --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88237.json @@ -0,0 +1,328 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88237", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:16:56.991Z", + "dateUpdated": "2026-11-10T18:16:56.991Z" + }, + "containers": { + "cna": { + "title": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:56.991Z" + }, + "references": [ + { + "name": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88237" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88238.json b/data/2026/88xxx/CVE-2026-88238.json new file mode 100644 index 0000000000..14f5a32e84 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88238.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88238", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:16:57.513Z", + "dateUpdated": "2026-11-10T18:16:57.513Z" + }, + "containers": { + "cna": { + "title": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:57.513Z" + }, + "references": [ + { + "name": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88238" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88239.json b/data/2026/88xxx/CVE-2026-88239.json new file mode 100644 index 0000000000..df1c8a6384 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88239.json @@ -0,0 +1,428 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88239", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:16:58.038Z", + "dateUpdated": "2026-11-10T18:16:58.038Z" + }, + "containers": { + "cna": { + "title": "Windows Biometric Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7725" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7725" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5622" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7582" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7582" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9445" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9445" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33438" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33438" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.2954" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7725", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7725", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7582", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7582", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9445", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9445", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.2954", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5622", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33438", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33438", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:58.038Z" + }, + "references": [ + { + "name": "Windows Biometric Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88239" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88240.json b/data/2026/88xxx/CVE-2026-88240.json new file mode 100644 index 0000000000..9f97242cb3 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88240.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88240", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:16:58.621Z", + "dateUpdated": "2026-11-10T18:16:58.621Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:58.621Z" + }, + "references": [ + { + "name": "Windows DHCP Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88240" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88241.json b/data/2026/88xxx/CVE-2026-88241.json new file mode 100644 index 0000000000..94b80d20bd --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88241.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88241", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:15:48.498Z", + "dateUpdated": "2026-11-10T18:15:48.498Z" + }, + "containers": { + "cna": { + "title": "Windows Sensor Data Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:48.498Z" + }, + "references": [ + { + "name": "Windows Sensor Data Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88241" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88242.json b/data/2026/88xxx/CVE-2026-88242.json new file mode 100644 index 0000000000..e1ff6c0af1 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88242.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88242", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:16:59.149Z", + "dateUpdated": "2026-11-10T18:16:59.149Z" + }, + "containers": { + "cna": { + "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:59.149Z" + }, + "references": [ + { + "name": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88242" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88243.json b/data/2026/88xxx/CVE-2026-88243.json new file mode 100644 index 0000000000..b153f44904 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88243.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88243", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.671Z", + "datePublished": "2026-11-10T18:16:59.675Z", + "dateUpdated": "2026-11-10T18:16:59.675Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:59.675Z" + }, + "references": [ + { + "name": "Windows DHCP Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88243" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88244.json b/data/2026/88xxx/CVE-2026-88244.json new file mode 100644 index 0000000000..1096f9e9f8 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88244.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88244", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.672Z", + "datePublished": "2026-11-10T18:15:49.006Z", + "dateUpdated": "2026-11-10T18:15:49.006Z" + }, + "containers": { + "cna": { + "title": "Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:49.006Z" + }, + "references": [ + { + "name": "Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88244" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88245.json b/data/2026/88xxx/CVE-2026-88245.json new file mode 100644 index 0000000000..80a71ab772 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88245.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88245", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.672Z", + "datePublished": "2026-11-10T18:17:00.272Z", + "dateUpdated": "2026-11-10T18:17:00.272Z" + }, + "containers": { + "cna": { + "title": "Windows Brokering File System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:00.272Z" + }, + "references": [ + { + "name": "Windows Brokering File System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88245" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88247.json b/data/2026/88xxx/CVE-2026-88247.json new file mode 100644 index 0000000000..4a5c289da8 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88247.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88247", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.672Z", + "datePublished": "2026-11-10T18:15:49.447Z", + "dateUpdated": "2026-11-10T18:15:49.447Z" + }, + "containers": { + "cna": { + "title": "Windows Program Compatibility Assistant Service Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:49.447Z" + }, + "references": [ + { + "name": "Windows Program Compatibility Assistant Service Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88247" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88249.json b/data/2026/88xxx/CVE-2026-88249.json new file mode 100644 index 0000000000..da5922fb85 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88249.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88249", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-09T22:05:19.672Z", + "datePublished": "2026-11-10T18:15:50.034Z", + "dateUpdated": "2026-11-10T18:15:50.034Z" + }, + "containers": { + "cna": { + "title": "Windows Client for NFS Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:50.034Z" + }, + "references": [ + { + "name": "Windows Client for NFS Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88249" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88822.json b/data/2026/88xxx/CVE-2026-88822.json new file mode 100644 index 0000000000..7f60bac12b --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88822.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88822", + "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "state": "PUBLISHED", + "assignerShortName": "openssl", + "dateReserved": "2026-09-10T09:08:26.966Z", + "datePublished": "2026-11-10T18:15:38.961Z", + "dateUpdated": "2026-11-10T18:15:38.961Z" + }, + "containers": { + "cna": { + "affected": [ + { + "defaultStatus": "unaffected", + "product": "OpenSSL", + "vendor": "OpenSSL", + "versions": [ + { + "lessThan": "4.1.1", + "status": "affected", + "version": "4.1.0", + "versionType": "semver" + }, + { + "lessThan": "4.0.4", + "status": "affected", + "version": "4.0.0", + "versionType": "semver" + }, + { + "lessThan": "3.5.10", + "status": "affected", + "version": "3.5.0", + "versionType": "semver" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "type": "reporter", + "value": "Jaehun Lee" + }, + { + "lang": "en", + "type": "remediation developer", + "value": "Neil Horman" + } + ], + "datePublic": "2026-11-10T11:00:00.000Z", + "descriptions": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "Issue summary: QUIC, when performing automated peer detection, may allow
uninitialized stack data to leak into the received address which is then used
as the destination for outgoing packets.

Impact summary: Applications using QUIC's automated peer detection mechanism
may receive an invalid address, leading to connection loss and disclosure of
uninitialized stack data to an attacker observing the outgoing network traffic.

CWE: CWE-457 (Use of Uninitialized Variable)

Description: The OpenSSL QUIC stack contains a feature in which, when using an
already connected socket, it will auto-detect the peer address during the SSL
handshake. This feature uses the getpeername() function, passing a buffer of
sufficient length to hold any supported address family, but passes a buffer
length that is only sized such that larger addresses, such as IPv6, cannot be
retrieved. The getpeername() function however, still returns the full address
length, which is accepted as the valid input buffer length, leading to the
address buffer containing uninitialized stack data instead of the actual peer
address. The invalid peer address is then used as destination for the outgoing
packets which leads to a connectivity breakage and a leakage of the
uninitialized stack data to passive network observers.

FIPS impact: no
The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE as
the affected protocol is not implemented in the FIPS module." + } + ], + "value": "Issue summary: QUIC, when performing automated peer detection, may allow\nuninitialized stack data to leak into the received address which is then used\nas the destination for outgoing packets.\n\nImpact summary: Applications using QUIC's automated peer detection mechanism\nmay receive an invalid address, leading to connection loss and disclosure of\nuninitialized stack data to an attacker observing the outgoing network traffic.\n\nCWE: CWE-457 (Use of Uninitialized Variable)\n\nDescription: The OpenSSL QUIC stack contains a feature in which, when using an\nalready connected socket, it will auto-detect the peer address during the SSL\nhandshake. This feature uses the getpeername() function, passing a buffer of\nsufficient length to hold any supported address family, but passes a buffer\nlength that is only sized such that larger addresses, such as IPv6, cannot be\nretrieved. The getpeername() function however, still returns the full address\nlength, which is accepted as the valid input buffer length, leading to the\naddress buffer containing uninitialized stack data instead of the actual peer\naddress. The invalid peer address is then used as destination for the outgoing\npackets which leads to a connectivity breakage and a leakage of the\nuninitialized stack data to passive network observers.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE as\nthe affected protocol is not implemented in the FIPS module." + } + ], + "metrics": [ + { + "format": "other", + "other": { + "content": { + "text": "Low" + }, + "type": "https://openssl-library.org/policies/general/security-policy/" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-457", + "description": "Use of Uninitialized Variable", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "shortName": "openssl", + "dateUpdated": "2026-11-10T18:15:38.961Z" + }, + "references": [ + { + "name": "OpenSSL Advisory", + "tags": [ + "vendor-advisory" + ], + "url": "https://openssl-library.org/news/secadv/20261110.txt" + }, + { + "name": "4.1.1 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/7b4f5344aa0401e7b777640050b5257ed2a70e88" + }, + { + "name": "4.0.4 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/911eee8eb7550b95a206f1ad8cbdb986098982f3" + }, + { + "name": "3.5.10 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/1a73dc590cbad62d6f0329ea4779eadaa8d8fd75" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "title": "QUIC Uses Uninitialized Stack Bytes During Automated Peer Detection", + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/88xxx/CVE-2026-88823.json b/data/2026/88xxx/CVE-2026-88823.json new file mode 100644 index 0000000000..f9733b39f8 --- /dev/null +++ b/data/2026/88xxx/CVE-2026-88823.json @@ -0,0 +1,145 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-88823", + "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "state": "PUBLISHED", + "assignerShortName": "openssl", + "dateReserved": "2026-09-10T09:08:26.966Z", + "datePublished": "2026-11-10T18:15:49.358Z", + "dateUpdated": "2026-11-10T18:15:49.358Z" + }, + "containers": { + "cna": { + "affected": [ + { + "defaultStatus": "unaffected", + "product": "OpenSSL", + "vendor": "OpenSSL", + "versions": [ + { + "lessThan": "4.1.1", + "status": "affected", + "version": "4.1.0", + "versionType": "semver" + }, + { + "lessThan": "4.0.4", + "status": "affected", + "version": "4.0.0", + "versionType": "semver" + }, + { + "lessThan": "3.5.10", + "status": "affected", + "version": "3.5.0", + "versionType": "semver" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "type": "reporter", + "value": "Jérémy Jean (ANSSI)" + }, + { + "lang": "en", + "type": "reporter", + "value": "Bhargava Shastry" + }, + { + "lang": "en", + "type": "reporter", + "value": "Jonathan Bateman (Rochester Institute of Technology)" + }, + { + "lang": "en", + "type": "remediation developer", + "value": "Daniel Kubec" + } + ], + "datePublic": "2026-11-10T11:05:35.000Z", + "descriptions": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional
Authenticated Data (AAD) update as a reset of all the AAD supplied so far,
instead of leaving the AAD unchanged. An application that supplies its AAD in
several fragments, one of which is empty, therefore produces or verifies
messages whose authentication tag does not cover the AAD supplied before
the empty fragment.

Impact summary: Data an application intended to authenticate alongside a
message is silently left unauthenticated. An attacker can forge the AAD of such
a message.

CWE: CWE-325: Missing Cryptographic Step

Description: An application passing AAD in multiple chunks of which some have
zero length will have the previous AAD chunks effectively unauthenticated. Also,
on context re-initialisation, the AAD was not reset, which meant that any AAD
accumulated from the previous context usage were also included in the AAD of the
new message.

The fix makes a zero-length AAD update a no-op and clears any accumulated AAD
whenever the context is re-initialised with a key or a nonce.
A re-initialisation that only changes parameters keeps the AAD.

FIPS impact: no
The FIPS modules are not affected, as AES-GCM-SIV is not a FIPS approved
algorithm and is implemented only in the default provider, outside the
OpenSSL FIPS module boundary." + } + ], + "value": "Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional\nAuthenticated Data (AAD) update as a reset of all the AAD supplied so far,\ninstead of leaving the AAD unchanged. An application that supplies its AAD in\nseveral fragments, one of which is empty, therefore produces or verifies\nmessages whose authentication tag does not cover the AAD supplied before\nthe empty fragment.\n\nImpact summary: Data an application intended to authenticate alongside a\nmessage is silently left unauthenticated. An attacker can forge the AAD of such\na message.\n\nCWE: CWE-325: Missing Cryptographic Step\n\nDescription: An application passing AAD in multiple chunks of which some have\nzero length will have the previous AAD chunks effectively unauthenticated. Also,\non context re-initialisation, the AAD was not reset, which meant that any AAD\naccumulated from the previous context usage were also included in the AAD of the\nnew message.\n\nThe fix makes a zero-length AAD update a no-op and clears any accumulated AAD\nwhenever the context is re-initialised with a key or a nonce.\nA re-initialisation that only changes parameters keeps the AAD.\n\nFIPS impact: no\nThe FIPS modules are not affected, as AES-GCM-SIV is not a FIPS approved\nalgorithm and is implemented only in the default provider, outside the\nOpenSSL FIPS module boundary." + } + ], + "metrics": [ + { + "format": "other", + "other": { + "content": { + "text": "Low" + }, + "type": "https://openssl-library.org/policies/general/security-policy/" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-325", + "description": "CWE-325 Missing Cryptographic Step", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "shortName": "openssl", + "dateUpdated": "2026-11-10T18:15:49.358Z" + }, + "references": [ + { + "name": "OpenSSL Advisory", + "tags": [ + "vendor-advisory" + ], + "url": "https://openssl-library.org/news/secadv/20261110.txt" + }, + { + "name": "4.1.1 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/6747b1a278816dd7db46438040a70b0b5e5e0a90" + }, + { + "name": "4.0.4 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/2f5fc833ff9b5bfe00b32f8b5c74f73c5773c682" + }, + { + "name": "3.5.10 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/159e1de0c448d7b9f09ad768c8e141def4aa1eb4" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "title": "AES-GCM-SIV AAD Forgery After Zero-length Incremental AAD Update", + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/89xxx/CVE-2026-89556.json b/data/2026/89xxx/CVE-2026-89556.json index 163aa3c49f..841ed53dcc 100644 --- a/data/2026/89xxx/CVE-2026-89556.json +++ b/data/2026/89xxx/CVE-2026-89556.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.724Z", "datePublished": "2026-09-11T19:44:29.080Z", - "dateUpdated": "2026-10-19T08:48:49.102Z" + "dateUpdated": "2026-11-10T18:15:09.542Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T08:48:49.102Z" + "dateUpdated": "2026-11-10T18:15:09.542Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "kernel/module/main.c" ], "versions": [ + { + "version": "f19f1a1c5fe56274e95b342e8138f4b774febf97", + "lessThan": "db07e9b0320e480f05f5c12e8e4d6699f0d3acb7", + "status": "affected", + "versionType": "git" + }, { "version": "c92aab819d56d51631f0484ed7af11d9d8ff4cb0", "lessThan": "50d0aa7d25ba4bc3606f150cd69755068e79f97f", @@ -124,6 +130,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/db07e9b0320e480f05f5c12e8e4d6699f0d3acb7" + }, { "url": "https://git.kernel.org/stable/c/50d0aa7d25ba4bc3606f150cd69755068e79f97f" }, diff --git a/data/2026/89xxx/CVE-2026-89866.json b/data/2026/89xxx/CVE-2026-89866.json index bbd6783a68..a2cf0adf41 100644 --- a/data/2026/89xxx/CVE-2026-89866.json +++ b/data/2026/89xxx/CVE-2026-89866.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.771Z", "datePublished": "2026-09-16T10:31:36.480Z", - "dateUpdated": "2026-10-19T08:53:59.539Z" + "dateUpdated": "2026-11-10T18:15:09.944Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T08:53:59.539Z" + "dateUpdated": "2026-11-10T18:15:09.944Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "drivers/media/platform/chips-media/wave5/wave5-vpu-dec.c" ], "versions": [ + { + "version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", + "lessThan": "9c757d77a6eb58ca4a47cada5ab60451e6c2d247", + "status": "affected", + "versionType": "git" + }, { "version": "9707a6254a8a6b978bde811a44fe07d86c229d1c", "lessThan": "56c2c5ad35614ca5ae23838d6af5d7f59e3124dc", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.57", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.8", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/9c757d77a6eb58ca4a47cada5ab60451e6c2d247" + }, { "url": "https://git.kernel.org/stable/c/56c2c5ad35614ca5ae23838d6af5d7f59e3124dc" }, diff --git a/data/2026/90xxx/CVE-2026-90975.json b/data/2026/90xxx/CVE-2026-90975.json index 5bc36a9359..4383006061 100644 --- a/data/2026/90xxx/CVE-2026-90975.json +++ b/data/2026/90xxx/CVE-2026-90975.json @@ -8,7 +8,7 @@ "assignerShortName": "certcc", "dateReserved": "2026-09-14T13:39:39.619Z", "datePublished": "2026-11-06T18:36:42.089Z", - "dateUpdated": "2026-11-06T19:11:47.406Z" + "dateUpdated": "2026-11-10T18:23:05.208Z" }, "containers": { "cna": { @@ -73,6 +73,66 @@ "shortName": "CVE", "dateUpdated": "2026-11-06T19:11:47.406Z" } + }, + { + "problemTypes": [ + { + "descriptions": [ + { + "type": "CWE", + "cweId": "CWE-822", + "lang": "en", + "description": "CWE-822 Untrusted Pointer Dereference" + } + ] + } + ], + "metrics": [ + { + "cvssV3_1": { + "scope": "UNCHANGED", + "version": "3.1", + "baseScore": 7.8, + "attackVector": "LOCAL", + "baseSeverity": "HIGH", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "integrityImpact": "HIGH", + "userInteraction": "NONE", + "attackComplexity": "LOW", + "availabilityImpact": "HIGH", + "privilegesRequired": "LOW", + "confidentialityImpact": "HIGH" + } + }, + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T18:22:27.974732Z", + "id": "CVE-2026-90975", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "no" + }, + { + "Technical Impact": "total" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T18:23:05.208Z" + } } ] } diff --git a/data/2026/92xxx/CVE-2026-92499.json b/data/2026/92xxx/CVE-2026-92499.json index 1ec671958a..e749b97e28 100644 --- a/data/2026/92xxx/CVE-2026-92499.json +++ b/data/2026/92xxx/CVE-2026-92499.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-16T12:21:13.871Z", "datePublished": "2026-09-17T16:10:13.391Z", - "dateUpdated": "2026-10-19T09:04:05.335Z" + "dateUpdated": "2026-11-10T18:15:10.609Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T09:04:05.335Z" + "dateUpdated": "2026-11-10T18:15:10.609Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/ext4/dir.c" ], "versions": [ + { + "version": "ac27a0ec112a089f1a5102bc8dffc79c8c815571", + "lessThan": "094e8139cf5a5e37b363ac984f628359558415e6", + "status": "affected", + "versionType": "git" + }, { "version": "ac27a0ec112a089f1a5102bc8dffc79c8c815571", "lessThan": "64d445d40e5ea4c4d4d88880db753b370cb69161", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.52", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.19", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/094e8139cf5a5e37b363ac984f628359558415e6" + }, { "url": "https://git.kernel.org/stable/c/64d445d40e5ea4c4d4d88880db753b370cb69161" }, diff --git a/data/2026/94xxx/CVE-2026-94507.json b/data/2026/94xxx/CVE-2026-94507.json new file mode 100644 index 0000000000..d2aa496ec0 --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94507.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94507", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.965Z", + "datePublished": "2026-11-10T18:17:00.785Z", + "dateUpdated": "2026-11-10T18:17:00.785Z" + }, + "containers": { + "cna": { + "title": "DirectX Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:00.785Z" + }, + "references": [ + { + "name": "DirectX Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94507" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94511.json b/data/2026/94xxx/CVE-2026-94511.json new file mode 100644 index 0000000000..e393606d73 --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94511.json @@ -0,0 +1,251 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94511", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.966Z", + "datePublished": "2026-11-10T18:15:24.292Z", + "dateUpdated": "2026-11-10T18:15:24.292Z" + }, + "containers": { + "cna": { + "title": "SQL Server Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.0", + "versionEndExcluding": "15.0.2210.4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:-:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.0", + "versionEndExcluding": "14.0.2150.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2019_for_x64-based_systems_\\(cu32\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4510.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2017_for_x64-based_systems_\\(cu31\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3570.2" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.0", + "lessThan": "14.0.2150.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2017 for x64-based Systems (CU31)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "14.0.3006.16", + "lessThan": "14.0.3570.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.0", + "lessThan": "15.0.2210.4", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2019 for x64-based Systems (CU32)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "15.0.4003.23", + "lessThan": "15.0.4510.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:24.292Z" + }, + "references": [ + { + "name": "SQL Server Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94511" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94513.json b/data/2026/94xxx/CVE-2026-94513.json new file mode 100644 index 0000000000..409f0f4888 --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94513.json @@ -0,0 +1,167 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94513", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.966Z", + "datePublished": "2026-11-10T18:15:24.809Z", + "dateUpdated": "2026-11-10T18:15:24.809Z" + }, + "containers": { + "cna": { + "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.0", + "versionEndExcluding": "16.0.1220.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "17.0.1050.2", + "versionEndExcluding": "17.0.1155.3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:microsoft_sql_server_2022_for_x64-based_systems_\\(cu27\\):*:*:*:*:*:*:*:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4315.2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2025_for_x64-based_systems_cu10:*:*:*:*:*:*:*:*", + "versionStartIncluding": "17.0.4006.0", + "versionEndExcluding": "17.0.5045.3" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.0", + "lessThan": "16.0.1220.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2022 for x64-based Systems (CU27)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "16.0.4003.1", + "lessThan": "16.0.4315.2", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 CU10", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.4006.0", + "lessThan": "17.0.5045.3", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Microsoft SQL Server 2025 for x64-based Systems (GDR)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "17.0.1050.2", + "lessThan": "17.0.1155.3", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:24.809Z" + }, + "references": [ + { + "name": "Microsoft SQL Server Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94513" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94514.json b/data/2026/94xxx/CVE-2026-94514.json new file mode 100644 index 0000000000..71296aea51 --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94514.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94514", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.966Z", + "datePublished": "2026-11-10T18:17:01.231Z", + "dateUpdated": "2026-11-10T18:17:01.231Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:01.231Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94514" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94515.json b/data/2026/94xxx/CVE-2026-94515.json new file mode 100644 index 0000000000..c8ab333b32 --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94515.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94515", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.966Z", + "datePublished": "2026-11-10T18:15:50.626Z", + "dateUpdated": "2026-11-10T18:15:50.626Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:50.626Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94515" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94517.json b/data/2026/94xxx/CVE-2026-94517.json new file mode 100644 index 0000000000..192e56cd67 --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94517.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94517", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.966Z", + "datePublished": "2026-11-10T18:15:51.160Z", + "dateUpdated": "2026-11-10T18:15:51.160Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Transaction Manager Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:51.160Z" + }, + "references": [ + { + "name": "Windows Kernel Transaction Manager Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94517" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94519.json b/data/2026/94xxx/CVE-2026-94519.json new file mode 100644 index 0000000000..17b9dcee4b --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94519.json @@ -0,0 +1,219 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94519", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.966Z", + "datePublished": "2026-11-10T18:15:51.754Z", + "dateUpdated": "2026-11-10T18:15:51.754Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:51.754Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94519" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94522.json b/data/2026/94xxx/CVE-2026-94522.json new file mode 100644 index 0000000000..dc96cbde33 --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94522.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94522", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.967Z", + "datePublished": "2026-11-10T18:15:52.269Z", + "dateUpdated": "2026-11-10T18:15:52.269Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Transaction Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:52.269Z" + }, + "references": [ + { + "name": "Windows Kernel Transaction Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94522" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94525.json b/data/2026/94xxx/CVE-2026-94525.json new file mode 100644 index 0000000000..24c3b2bbdf --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94525.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94525", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.967Z", + "datePublished": "2026-11-10T18:17:01.764Z", + "dateUpdated": "2026-11-10T18:17:01.764Z" + }, + "containers": { + "cna": { + "title": "Windows Error Reporting Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.\nAn attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application.\nThe security update addresses the vulnerability by correcting the way that WER handles and executes files.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:01.764Z" + }, + "references": [ + { + "name": "Windows Error Reporting Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94525" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94527.json b/data/2026/94xxx/CVE-2026-94527.json new file mode 100644 index 0000000000..6c56adac34 --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94527.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94527", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.967Z", + "datePublished": "2026-11-10T18:15:52.787Z", + "dateUpdated": "2026-11-10T18:15:52.787Z" + }, + "containers": { + "cna": { + "title": "Windows GDI Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:52.787Z" + }, + "references": [ + { + "name": "Windows GDI Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94527" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94529.json b/data/2026/94xxx/CVE-2026-94529.json new file mode 100644 index 0000000000..c3ee68209f --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94529.json @@ -0,0 +1,287 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94529", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.967Z", + "datePublished": "2026-11-10T18:17:02.368Z", + "dateUpdated": "2026-11-10T18:17:02.368Z" + }, + "containers": { + "cna": { + "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:02.368Z" + }, + "references": [ + { + "name": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94529" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/94xxx/CVE-2026-94531.json b/data/2026/94xxx/CVE-2026-94531.json new file mode 100644 index 0000000000..0bf797fcfc --- /dev/null +++ b/data/2026/94xxx/CVE-2026-94531.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-94531", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-21T18:23:52.968Z", + "datePublished": "2026-11-10T18:17:02.847Z", + "dateUpdated": "2026-11-10T18:17:02.847Z" + }, + "containers": { + "cna": { + "title": "Windows COM Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:02.847Z" + }, + "references": [ + { + "name": "Windows COM Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94531" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95691.json b/data/2026/95xxx/CVE-2026-95691.json new file mode 100644 index 0000000000..f29d6b5651 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95691.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95691", + "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "state": "PUBLISHED", + "assignerShortName": "openssl", + "dateReserved": "2026-09-22T14:18:48.635Z", + "datePublished": "2026-11-10T18:16:03.752Z", + "dateUpdated": "2026-11-10T18:16:03.752Z" + }, + "containers": { + "cna": { + "affected": [ + { + "defaultStatus": "unaffected", + "product": "OpenSSL", + "vendor": "OpenSSL", + "versions": [ + { + "lessThan": "4.1.1", + "status": "affected", + "version": "4.1.0", + "versionType": "semver" + }, + { + "lessThan": "4.0.4", + "status": "affected", + "version": "4.0.0", + "versionType": "semver" + }, + { + "lessThan": "3.5.10", + "status": "affected", + "version": "3.5.0", + "versionType": "semver" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "type": "reporter", + "value": "Filipe Casal (Trail of Bits)" + }, + { + "lang": "en", + "type": "remediation developer", + "value": "Filipe Casal (Trail of Bits)" + } + ], + "datePublic": "2026-11-10T11:00:00.000Z", + "descriptions": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "Issue summary: A retransmitted QUIC CRYPTO frame can release packet storage
while the TLS record layer retains a direct pointer into that storage causing
use after free.

Impact summary: A malicious QUIC server can cause a heap-use-after-free read
in the OpenSSL QUIC client. The server can also identify one allocator-adjacent
byte through the client's protected Handshake response.

CWE: CWE-416: Use After Free

Description: During CRYPTO stream processing, a pointer into the first frame's
memory on the stream is lent to the TLS handshake processing. The memory
must remain stable until it is processed and released. However the processing
of retransmitted CRYPTO frames could release the memory if the retransmitted
frame fully overlapped the existing frame. This then causes use-after-free read
when the TLS handshake processing continues.

The use-after-free read can lead to a Denial-of-Service of the client
application or a minor leak of information about the heap memory contents
that might be overwritten with other data, subsequently allocated by
the application, to the peer.

FIPS impact: no
The FIPS module is not affected as the QUIC implementation is outside of
the OpenSSL FIPS module boundary." + } + ], + "value": "Issue summary: A retransmitted QUIC CRYPTO frame can release packet storage\nwhile the TLS record layer retains a direct pointer into that storage causing\nuse after free.\n\nImpact summary: A malicious QUIC server can cause a heap-use-after-free read\nin the OpenSSL QUIC client. The server can also identify one allocator-adjacent\nbyte through the client's protected Handshake response.\n\nCWE: CWE-416: Use After Free\n\nDescription: During CRYPTO stream processing, a pointer into the first frame's\nmemory on the stream is lent to the TLS handshake processing. The memory\nmust remain stable until it is processed and released. However the processing\nof retransmitted CRYPTO frames could release the memory if the retransmitted\nframe fully overlapped the existing frame. This then causes use-after-free read\nwhen the TLS handshake processing continues.\n\nThe use-after-free read can lead to a Denial-of-Service of the client\napplication or a minor leak of information about the heap memory contents\nthat might be overwritten with other data, subsequently allocated by\nthe application, to the peer.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary." + } + ], + "metrics": [ + { + "format": "other", + "other": { + "content": { + "text": "Low" + }, + "type": "https://openssl-library.org/policies/general/security-policy/" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-416", + "description": "CWE-416 Use After Free", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "shortName": "openssl", + "dateUpdated": "2026-11-10T18:16:03.752Z" + }, + "references": [ + { + "name": "OpenSSL Advisory", + "tags": [ + "vendor-advisory" + ], + "url": "https://openssl-library.org/news/secadv/20261110.txt" + }, + { + "name": "4.1.1 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/dd90ceb99a3c2ddba336bb4a00be9ebabd84c2a1" + }, + { + "name": "4.0.4 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/ec9d4de9d03989b29db5a3d7efdb4c285deaf386" + }, + { + "name": "3.5.10 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/f6244675833e097c2429a40d1b206d95385bd42f" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "title": "Retransmitted QUIC CRYPTO Frames Can Cause DoS or One-byte Disclosure", + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95692.json b/data/2026/95xxx/CVE-2026-95692.json new file mode 100644 index 0000000000..9094bf921c --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95692.json @@ -0,0 +1,135 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95692", + "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "state": "PUBLISHED", + "assignerShortName": "openssl", + "dateReserved": "2026-09-22T14:18:48.635Z", + "datePublished": "2026-11-10T18:16:18.675Z", + "dateUpdated": "2026-11-10T18:16:18.675Z" + }, + "containers": { + "cna": { + "affected": [ + { + "defaultStatus": "unaffected", + "product": "OpenSSL", + "vendor": "OpenSSL", + "versions": [ + { + "lessThan": "4.1.1", + "status": "affected", + "version": "4.1.0", + "versionType": "semver" + }, + { + "lessThan": "4.0.4", + "status": "affected", + "version": "4.0.0", + "versionType": "semver" + }, + { + "lessThan": "3.5.10", + "status": "affected", + "version": "3.5.0", + "versionType": "semver" + } + ] + } + ], + "credits": [ + { + "lang": "en", + "type": "reporter", + "value": "Billy Brumley (Rochester Institute of Technology)" + }, + { + "lang": "en", + "type": "remediation developer", + "value": "Billy Brumley (Rochester Institute of Technology)" + } + ], + "datePublic": "2026-11-10T11:00:00.000Z", + "descriptions": [ + { + "lang": "en", + "supportingMedia": [ + { + "base64": false, + "type": "text/html", + "value": "Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce
length via EVP_CipherInit_ex() may trigger a heap out-of-bounds read.
Supplying a longer IV is silently truncated instead of rejected.

Impact summary: An application passing a caller-supplied IV of the wrong
length may crash or read beyond its buffer. Because trailing IV bytes are
ignored, an attacker who knows one message and tag may forge messages under a
different IV.

CWE: CWE-125: Out-of-bounds Read

Description: AES-GCM-SIV copies the caller-supplied IV or nonce into its
internal state using a copy whose length is taken from the expected nonce size
rather than from the length the caller actually provided. When the caller
passes a shorter IV, the copy reads past the end of the caller's buffer;
AddressSanitizer confirms a heap out-of-bounds read reached through
EVP_CipherInit_ex() into ossl_aes_gcm_siv_init(). When the caller passes a
longer IV, the implementation silently discards the trailing bytes instead of
rejecting the length.

The truncation breaks the binding between the IV and the computed
authentication tag. An attacker who has observed a message and its tag under
one IV can produce a message and tag that verify under a different IV whose
first bytes match, since the surplus bytes never influence the computation.
The message itself is unchanged, so this is a failure of IV commitment rather
than a classic existential forgery.

Only applications that call EVP_CipherInit_ex() (or the equivalent provider
cipher initialization) with an IV length other than the standard 12 bytes for
AES-GCM-SIV are affected. The severity is limited because the out-of-bounds
read is small and attacker-controlled only in length, and the forgery requires
an unusual IV length choice by the application.

FIPS impact: no
The FIPS modules are not affected by this issue, as AES-GCM-SIV is not an
approved algorithm." + } + ], + "value": "Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce\nlength via EVP_CipherInit_ex() may trigger a heap out-of-bounds read.\nSupplying a longer IV is silently truncated instead of rejected.\n\nImpact summary: An application passing a caller-supplied IV of the wrong\nlength may crash or read beyond its buffer. Because trailing IV bytes are\nignored, an attacker who knows one message and tag may forge messages under a\ndifferent IV.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: AES-GCM-SIV copies the caller-supplied IV or nonce into its\ninternal state using a copy whose length is taken from the expected nonce size\nrather than from the length the caller actually provided. When the caller\npasses a shorter IV, the copy reads past the end of the caller's buffer;\nAddressSanitizer confirms a heap out-of-bounds read reached through\nEVP_CipherInit_ex() into ossl_aes_gcm_siv_init(). When the caller passes a\nlonger IV, the implementation silently discards the trailing bytes instead of\nrejecting the length.\n\nThe truncation breaks the binding between the IV and the computed\nauthentication tag. An attacker who has observed a message and its tag under\none IV can produce a message and tag that verify under a different IV whose\nfirst bytes match, since the surplus bytes never influence the computation.\nThe message itself is unchanged, so this is a failure of IV commitment rather\nthan a classic existential forgery.\n\nOnly applications that call EVP_CipherInit_ex() (or the equivalent provider\ncipher initialization) with an IV length other than the standard 12 bytes for\nAES-GCM-SIV are affected. The severity is limited because the out-of-bounds\nread is small and attacker-controlled only in length, and the forgery requires\nan unusual IV length choice by the application.\n\nFIPS impact: no\nThe FIPS modules are not affected by this issue, as AES-GCM-SIV is not an\napproved algorithm." + } + ], + "metrics": [ + { + "format": "other", + "other": { + "content": { + "text": "Low" + }, + "type": "https://openssl-library.org/policies/general/security-policy/" + } + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "cweId": "CWE-125", + "description": "CWE-125 Out-of-bounds Read", + "lang": "en", + "type": "CWE" + } + ] + } + ], + "providerMetadata": { + "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", + "shortName": "openssl", + "dateUpdated": "2026-11-10T18:16:18.675Z" + }, + "references": [ + { + "name": "OpenSSL Advisory", + "tags": [ + "vendor-advisory" + ], + "url": "https://openssl-library.org/news/secadv/20261110.txt" + }, + { + "name": "4.1.1 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/70a47ac78b6f3be1b22fb1551bd0bfcff4f29613" + }, + { + "name": "4.0.4 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/510872388f5d145cf870868b3d288a23822cb776" + }, + { + "name": "3.5.10 git commit", + "tags": [ + "patch" + ], + "url": "https://github.com/openssl/openssl/commit/257a3427aa0ef8d9dd2ef5b3e2d1c021a221b116" + } + ], + "source": { + "discovery": "UNKNOWN" + }, + "title": "Out-of-Bounds Read and Incorrect IV Length Handling in AES-GCM-SIV", + "x_generator": { + "engine": "Vulnogram 0.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95871.json b/data/2026/95xxx/CVE-2026-95871.json new file mode 100644 index 0000000000..845358b770 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95871.json @@ -0,0 +1,287 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95871", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.908Z", + "datePublished": "2026-11-10T18:17:03.448Z", + "dateUpdated": "2026-11-10T18:17:03.448Z" + }, + "containers": { + "cna": { + "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:03.448Z" + }, + "references": [ + { + "name": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95871" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95872.json b/data/2026/95xxx/CVE-2026-95872.json new file mode 100644 index 0000000000..cb02eb453b --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95872.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95872", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.909Z", + "datePublished": "2026-11-10T18:15:53.304Z", + "dateUpdated": "2026-11-10T18:15:53.304Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:53.304Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95872" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95874.json b/data/2026/95xxx/CVE-2026-95874.json new file mode 100644 index 0000000000..7e53697064 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95874.json @@ -0,0 +1,429 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95874", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.909Z", + "datePublished": "2026-11-10T18:15:53.826Z", + "dateUpdated": "2026-11-10T18:15:53.826Z" + }, + "containers": { + "cna": { + "title": "Xbox Gaming Services Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:53.826Z" + }, + "references": [ + { + "name": "Xbox Gaming Services Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95874" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95876.json b/data/2026/95xxx/CVE-2026-95876.json new file mode 100644 index 0000000000..403d01c8d8 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95876.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95876", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.909Z", + "datePublished": "2026-11-10T18:17:03.981Z", + "dateUpdated": "2026-11-10T18:17:03.981Z" + }, + "containers": { + "cna": { + "title": "Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:03.981Z" + }, + "references": [ + { + "name": "Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95876" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95877.json b/data/2026/95xxx/CVE-2026-95877.json new file mode 100644 index 0000000000..366b2c2729 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95877.json @@ -0,0 +1,428 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95877", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.909Z", + "datePublished": "2026-11-10T18:17:04.509Z", + "dateUpdated": "2026-11-10T18:17:04.509Z" + }, + "containers": { + "cna": { + "title": "Windows Biometric Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7725" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7725" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5622" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7582" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7582" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9445" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9445" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33438" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33438" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.2954" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7725", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7725", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7582", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7582", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9445", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9445", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.2954", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5622", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33438", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33438", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:04.509Z" + }, + "references": [ + { + "name": "Windows Biometric Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95877" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95879.json b/data/2026/95xxx/CVE-2026-95879.json new file mode 100644 index 0000000000..98208ca2c6 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95879.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95879", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.909Z", + "datePublished": "2026-11-10T18:17:05.013Z", + "dateUpdated": "2026-11-10T18:17:05.013Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:05.013Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95879" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95881.json b/data/2026/95xxx/CVE-2026-95881.json new file mode 100644 index 0000000000..d190a4e454 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95881.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95881", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.909Z", + "datePublished": "2026-11-10T18:17:05.567Z", + "dateUpdated": "2026-11-10T18:17:05.567Z" + }, + "containers": { + "cna": { + "title": "Windows Push Notifications Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:05.567Z" + }, + "references": [ + { + "name": "Windows Push Notifications Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95881" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95882.json b/data/2026/95xxx/CVE-2026-95882.json new file mode 100644 index 0000000000..0458f4ddd9 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95882.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95882", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.909Z", + "datePublished": "2026-11-10T18:15:54.409Z", + "dateUpdated": "2026-11-10T18:15:54.409Z" + }, + "containers": { + "cna": { + "title": "Microsoft DirectMusic Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:54.409Z" + }, + "references": [ + { + "name": "Microsoft DirectMusic Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95882" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95884.json b/data/2026/95xxx/CVE-2026-95884.json new file mode 100644 index 0000000000..e360236616 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95884.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95884", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.910Z", + "datePublished": "2026-11-10T18:15:54.939Z", + "dateUpdated": "2026-11-10T18:15:54.939Z" + }, + "containers": { + "cna": { + "title": "Windows Active Directory Certificate Services Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-126: Buffer Over-read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-126" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:54.939Z" + }, + "references": [ + { + "name": "Windows Active Directory Certificate Services Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95884" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95885.json b/data/2026/95xxx/CVE-2026-95885.json new file mode 100644 index 0000000000..883c695610 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95885.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95885", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.910Z", + "datePublished": "2026-11-10T18:15:55.455Z", + "dateUpdated": "2026-11-10T18:15:55.455Z" + }, + "containers": { + "cna": { + "title": "Windows Client for NFS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:55.455Z" + }, + "references": [ + { + "name": "Windows Client for NFS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95885" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95888.json b/data/2026/95xxx/CVE-2026-95888.json new file mode 100644 index 0000000000..e9c805163b --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95888.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95888", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.910Z", + "datePublished": "2026-11-10T18:17:06.133Z", + "dateUpdated": "2026-11-10T18:17:06.133Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:06.133Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95888" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95889.json b/data/2026/95xxx/CVE-2026-95889.json new file mode 100644 index 0000000000..470e53676e --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95889.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95889", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.910Z", + "datePublished": "2026-11-10T18:17:06.566Z", + "dateUpdated": "2026-11-10T18:17:06.566Z" + }, + "containers": { + "cna": { + "title": "Windows Storage Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + }, + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:06.566Z" + }, + "references": [ + { + "name": "Windows Storage Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95889" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95891.json b/data/2026/95xxx/CVE-2026-95891.json new file mode 100644 index 0000000000..98fbee21d1 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95891.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95891", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.910Z", + "datePublished": "2026-11-10T18:17:07.111Z", + "dateUpdated": "2026-11-10T18:17:07.111Z" + }, + "containers": { + "cna": { + "title": "Microsoft DirectMusic Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:07.111Z" + }, + "references": [ + { + "name": "Microsoft DirectMusic Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95891" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95893.json b/data/2026/95xxx/CVE-2026-95893.json new file mode 100644 index 0000000000..a5dfcff3f2 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95893.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95893", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.910Z", + "datePublished": "2026-11-10T18:17:07.569Z", + "dateUpdated": "2026-11-10T18:17:07.569Z" + }, + "containers": { + "cna": { + "title": "Win32k Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:07.569Z" + }, + "references": [ + { + "name": "Win32k Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95893" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95894.json b/data/2026/95xxx/CVE-2026-95894.json new file mode 100644 index 0000000000..e89cf7bb03 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95894.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95894", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.910Z", + "datePublished": "2026-11-10T18:15:56.028Z", + "dateUpdated": "2026-11-10T18:15:56.028Z" + }, + "containers": { + "cna": { + "title": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:56.028Z" + }, + "references": [ + { + "name": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95894" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95895.json b/data/2026/95xxx/CVE-2026-95895.json new file mode 100644 index 0000000000..4b180404eb --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95895.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95895", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.910Z", + "datePublished": "2026-11-10T18:17:08.153Z", + "dateUpdated": "2026-11-10T18:17:08.153Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9911" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9911" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9911" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9911", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9911", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9911", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:08.153Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95895" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95896.json b/data/2026/95xxx/CVE-2026-95896.json new file mode 100644 index 0000000000..bb02a9919f --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95896.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95896", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:07:11.911Z", + "datePublished": "2026-11-10T18:17:08.724Z", + "dateUpdated": "2026-11-10T18:17:08.724Z" + }, + "containers": { + "cna": { + "title": "Microsoft DirectMusic Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:08.724Z" + }, + "references": [ + { + "name": "Microsoft DirectMusic Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95896" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95898.json b/data/2026/95xxx/CVE-2026-95898.json new file mode 100644 index 0000000000..a4740bbeba --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95898.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95898", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.225Z", + "datePublished": "2026-11-10T18:15:56.543Z", + "dateUpdated": "2026-11-10T18:15:56.543Z" + }, + "containers": { + "cna": { + "title": "Windows iSCSI Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:56.543Z" + }, + "references": [ + { + "name": "Windows iSCSI Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95898" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95901.json b/data/2026/95xxx/CVE-2026-95901.json new file mode 100644 index 0000000000..322619b72b --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95901.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95901", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.225Z", + "datePublished": "2026-11-10T18:15:56.984Z", + "dateUpdated": "2026-11-10T18:15:56.984Z" + }, + "containers": { + "cna": { + "title": "Microsoft DirectMusic Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:56.984Z" + }, + "references": [ + { + "name": "Microsoft DirectMusic Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95901" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95902.json b/data/2026/95xxx/CVE-2026-95902.json new file mode 100644 index 0000000000..ef6bc43a94 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95902.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95902", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.225Z", + "datePublished": "2026-11-10T18:15:57.438Z", + "dateUpdated": "2026-11-10T18:15:57.438Z" + }, + "containers": { + "cna": { + "title": "Windows USB Hub Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:57.438Z" + }, + "references": [ + { + "name": "Windows USB Hub Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95902" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95905.json b/data/2026/95xxx/CVE-2026-95905.json new file mode 100644 index 0000000000..7c7c98ef8b --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95905.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95905", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.226Z", + "datePublished": "2026-11-10T18:15:57.955Z", + "dateUpdated": "2026-11-10T18:15:57.955Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:57.955Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95905" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95906.json b/data/2026/95xxx/CVE-2026-95906.json new file mode 100644 index 0000000000..01323aaa42 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95906.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95906", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.226Z", + "datePublished": "2026-11-10T18:15:58.409Z", + "dateUpdated": "2026-11-10T18:15:58.409Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:58.409Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95906" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95908.json b/data/2026/95xxx/CVE-2026-95908.json new file mode 100644 index 0000000000..413dd351bf --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95908.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95908", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.226Z", + "datePublished": "2026-11-10T18:17:09.253Z", + "dateUpdated": "2026-11-10T18:17:09.253Z" + }, + "containers": { + "cna": { + "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:09.253Z" + }, + "references": [ + { + "name": "Windows Remote Desktop Client Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95908" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95909.json b/data/2026/95xxx/CVE-2026-95909.json new file mode 100644 index 0000000000..2f3de31372 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95909.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95909", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.226Z", + "datePublished": "2026-11-10T18:17:09.843Z", + "dateUpdated": "2026-11-10T18:17:09.843Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:09.843Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95909" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95910.json b/data/2026/95xxx/CVE-2026-95910.json new file mode 100644 index 0000000000..ce5eaf87b5 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95910.json @@ -0,0 +1,446 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95910", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.226Z", + "datePublished": "2026-11-10T18:17:10.432Z", + "dateUpdated": "2026-11-10T18:17:10.432Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-295: Improper Certificate Validation", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-295" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:10.432Z" + }, + "references": [ + { + "name": "Windows Hyper-V Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95910" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.7, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95913.json b/data/2026/95xxx/CVE-2026-95913.json new file mode 100644 index 0000000000..c10faef91c --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95913.json @@ -0,0 +1,446 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95913", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.226Z", + "datePublished": "2026-11-10T18:15:58.926Z", + "dateUpdated": "2026-11-10T18:15:58.926Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:58.926Z" + }, + "references": [ + { + "name": "Windows Hyper-V Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95913" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95920.json b/data/2026/95xxx/CVE-2026-95920.json new file mode 100644 index 0000000000..7cac494886 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95920.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95920", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.227Z", + "datePublished": "2026-11-10T18:17:11.031Z", + "dateUpdated": "2026-11-10T18:17:11.031Z" + }, + "containers": { + "cna": { + "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:11.031Z" + }, + "references": [ + { + "name": "Windows Management Instrumentation Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95920" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95922.json b/data/2026/95xxx/CVE-2026-95922.json new file mode 100644 index 0000000000..270b892e4d --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95922.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95922", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.227Z", + "datePublished": "2026-11-10T18:15:59.441Z", + "dateUpdated": "2026-11-10T18:15:59.441Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:59.441Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95922" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95923.json b/data/2026/95xxx/CVE-2026-95923.json new file mode 100644 index 0000000000..5b7fae2640 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95923.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95923", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:16:22.227Z", + "datePublished": "2026-11-10T18:15:59.986Z", + "dateUpdated": "2026-11-10T18:15:59.986Z" + }, + "containers": { + "cna": { + "title": "Windows HTTP.sys Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:15:59.986Z" + }, + "references": [ + { + "name": "Windows HTTP.sys Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95923" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95932.json b/data/2026/95xxx/CVE-2026-95932.json new file mode 100644 index 0000000000..e051594648 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95932.json @@ -0,0 +1,428 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95932", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.226Z", + "datePublished": "2026-11-10T18:17:11.537Z", + "dateUpdated": "2026-11-10T18:17:11.537Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-829" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:11.537Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95932" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95933.json b/data/2026/95xxx/CVE-2026-95933.json new file mode 100644 index 0000000000..d7c651218e --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95933.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95933", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.226Z", + "datePublished": "2026-11-10T18:16:00.534Z", + "dateUpdated": "2026-11-10T18:16:00.534Z" + }, + "containers": { + "cna": { + "title": "Windows OLE Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:00.534Z" + }, + "references": [ + { + "name": "Windows OLE Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95933" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95934.json b/data/2026/95xxx/CVE-2026-95934.json new file mode 100644 index 0000000000..b228dd612d --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95934.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95934", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.226Z", + "datePublished": "2026-11-10T18:17:12.058Z", + "dateUpdated": "2026-11-10T18:17:12.058Z" + }, + "containers": { + "cna": { + "title": "Windows Diagnostic Policy Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:12.058Z" + }, + "references": [ + { + "name": "Windows Diagnostic Policy Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95934" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95935.json b/data/2026/95xxx/CVE-2026-95935.json new file mode 100644 index 0000000000..f7bb4c678b --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95935.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95935", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.226Z", + "datePublished": "2026-11-10T18:16:01.048Z", + "dateUpdated": "2026-11-10T18:16:01.048Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:01.048Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95935" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95938.json b/data/2026/95xxx/CVE-2026-95938.json new file mode 100644 index 0000000000..f33879311b --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95938.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95938", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.227Z", + "datePublished": "2026-11-10T18:16:01.586Z", + "dateUpdated": "2026-11-10T18:16:01.586Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:01.586Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95938" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95942.json b/data/2026/95xxx/CVE-2026-95942.json new file mode 100644 index 0000000000..5627e50842 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95942.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95942", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.227Z", + "datePublished": "2026-11-10T18:16:02.557Z", + "dateUpdated": "2026-11-10T18:16:02.557Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:02.557Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95942" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95944.json b/data/2026/95xxx/CVE-2026-95944.json new file mode 100644 index 0000000000..65d542b6a1 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95944.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95944", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.227Z", + "datePublished": "2026-11-10T18:16:03.644Z", + "dateUpdated": "2026-11-10T18:16:03.644Z" + }, + "containers": { + "cna": { + "title": "Windows App Readiness Service Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:03.644Z" + }, + "references": [ + { + "name": "Windows App Readiness Service Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95944" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95946.json b/data/2026/95xxx/CVE-2026-95946.json new file mode 100644 index 0000000000..2f729cef09 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95946.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95946", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.227Z", + "datePublished": "2026-11-10T18:16:04.274Z", + "dateUpdated": "2026-11-10T18:16:04.274Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:04.274Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95946" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95947.json b/data/2026/95xxx/CVE-2026-95947.json new file mode 100644 index 0000000000..540672a7a0 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95947.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95947", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.227Z", + "datePublished": "2026-11-10T18:16:04.856Z", + "dateUpdated": "2026-11-10T18:16:04.856Z" + }, + "containers": { + "cna": { + "title": "Windows Error Reporting Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.\nAn attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application.\nThe security update addresses the vulnerability by correcting the way that WER handles and executes files.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:04.856Z" + }, + "references": [ + { + "name": "Windows Error Reporting Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95947" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95948.json b/data/2026/95xxx/CVE-2026-95948.json new file mode 100644 index 0000000000..1512bd0744 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95948.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95948", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.227Z", + "datePublished": "2026-11-10T18:17:12.570Z", + "dateUpdated": "2026-11-10T18:17:12.570Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:12.570Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95948" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95950.json b/data/2026/95xxx/CVE-2026-95950.json new file mode 100644 index 0000000000..941e3da1ba --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95950.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95950", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.227Z", + "datePublished": "2026-11-10T18:16:05.431Z", + "dateUpdated": "2026-11-10T18:16:05.431Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:05.431Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95950" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95951.json b/data/2026/95xxx/CVE-2026-95951.json new file mode 100644 index 0000000000..bf68900ba2 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95951.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95951", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.228Z", + "datePublished": "2026-11-10T18:17:13.099Z", + "dateUpdated": "2026-11-10T18:17:13.099Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:13.099Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95951" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95953.json b/data/2026/95xxx/CVE-2026-95953.json new file mode 100644 index 0000000000..c4a3707988 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95953.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95953", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.228Z", + "datePublished": "2026-11-10T18:16:06.058Z", + "dateUpdated": "2026-11-10T18:16:06.058Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:06.058Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95953" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95956.json b/data/2026/95xxx/CVE-2026-95956.json new file mode 100644 index 0000000000..7beeb0f826 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95956.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95956", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:24:45.228Z", + "datePublished": "2026-11-10T18:17:13.693Z", + "dateUpdated": "2026-11-10T18:17:13.693Z" + }, + "containers": { + "cna": { + "title": "Windows eSCL Scanner Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows eSCL Scanner allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:13.693Z" + }, + "references": [ + { + "name": "Windows eSCL Scanner Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95956" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95960.json b/data/2026/95xxx/CVE-2026-95960.json new file mode 100644 index 0000000000..0ce3385b3b --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95960.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95960", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.175Z", + "datePublished": "2026-11-10T18:16:06.677Z", + "dateUpdated": "2026-11-10T18:16:06.677Z" + }, + "containers": { + "cna": { + "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:06.677Z" + }, + "references": [ + { + "name": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95960" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95961.json b/data/2026/95xxx/CVE-2026-95961.json new file mode 100644 index 0000000000..5941151b31 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95961.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95961", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.175Z", + "datePublished": "2026-11-10T18:16:07.196Z", + "dateUpdated": "2026-11-10T18:16:07.196Z" + }, + "containers": { + "cna": { + "title": "Windows USB Video Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:07.196Z" + }, + "references": [ + { + "name": "Windows USB Video Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95961" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95962.json b/data/2026/95xxx/CVE-2026-95962.json new file mode 100644 index 0000000000..8a9ab81ef5 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95962.json @@ -0,0 +1,425 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95962", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.175Z", + "datePublished": "2026-11-10T18:17:14.281Z", + "dateUpdated": "2026-11-10T18:17:14.281Z" + }, + "containers": { + "cna": { + "title": "Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:14.281Z" + }, + "references": [ + { + "name": "Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95962" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95963.json b/data/2026/95xxx/CVE-2026-95963.json new file mode 100644 index 0000000000..f91ec0d0ed --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95963.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95963", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.175Z", + "datePublished": "2026-11-10T18:16:07.726Z", + "dateUpdated": "2026-11-10T18:16:07.726Z" + }, + "containers": { + "cna": { + "title": "Data Sharing Service Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-59: Improper Link Resolution Before File Access ('Link Following')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-59" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:07.726Z" + }, + "references": [ + { + "name": "Data Sharing Service Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95963" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95964.json b/data/2026/95xxx/CVE-2026-95964.json new file mode 100644 index 0000000000..70c27cc710 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95964.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95964", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.175Z", + "datePublished": "2026-11-10T18:16:08.162Z", + "dateUpdated": "2026-11-10T18:16:08.162Z" + }, + "containers": { + "cna": { + "title": "Remote Desktop Client Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:08.162Z" + }, + "references": [ + { + "name": "Remote Desktop Client Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95964" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95965.json b/data/2026/95xxx/CVE-2026-95965.json new file mode 100644 index 0000000000..161e6ed4e7 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95965.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95965", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.175Z", + "datePublished": "2026-11-10T18:17:14.857Z", + "dateUpdated": "2026-11-10T18:17:14.857Z" + }, + "containers": { + "cna": { + "title": "Windows USB Video Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:14.857Z" + }, + "references": [ + { + "name": "Windows USB Video Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95965" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95966.json b/data/2026/95xxx/CVE-2026-95966.json new file mode 100644 index 0000000000..209edb9ceb --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95966.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95966", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:17:15.298Z", + "dateUpdated": "2026-11-10T18:17:15.298Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:15.298Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95966" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95968.json b/data/2026/95xxx/CVE-2026-95968.json new file mode 100644 index 0000000000..7006ab8d4a --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95968.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95968", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:17:15.850Z", + "dateUpdated": "2026-11-10T18:17:15.850Z" + }, + "containers": { + "cna": { + "title": "Windows Smart Card Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:15.850Z" + }, + "references": [ + { + "name": "Windows Smart Card Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95968" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95971.json b/data/2026/95xxx/CVE-2026-95971.json new file mode 100644 index 0000000000..53d2f478a5 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95971.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95971", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:16:08.720Z", + "dateUpdated": "2026-11-10T18:16:08.720Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:08.720Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95971" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95973.json b/data/2026/95xxx/CVE-2026-95973.json new file mode 100644 index 0000000000..b92ebbdc61 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95973.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95973", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:16:09.246Z", + "dateUpdated": "2026-11-10T18:16:09.246Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:09.246Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95973" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95974.json b/data/2026/95xxx/CVE-2026-95974.json new file mode 100644 index 0000000000..594c0a50c3 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95974.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95974", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:17:16.421Z", + "dateUpdated": "2026-11-10T18:17:16.421Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:16.421Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95974" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95975.json b/data/2026/95xxx/CVE-2026-95975.json new file mode 100644 index 0000000000..9fada01bdf --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95975.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95975", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:16:09.718Z", + "dateUpdated": "2026-11-10T18:16:09.718Z" + }, + "containers": { + "cna": { + "title": "Windows Performance Counters Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:09.718Z" + }, + "references": [ + { + "name": "Windows Performance Counters Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95975" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95976.json b/data/2026/95xxx/CVE-2026-95976.json new file mode 100644 index 0000000000..fbdc5bb027 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95976.json @@ -0,0 +1,219 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95976", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:17:17.040Z", + "dateUpdated": "2026-11-10T18:17:17.040Z" + }, + "containers": { + "cna": { + "title": "Windows Diagnostic Policy Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:17.040Z" + }, + "references": [ + { + "name": "Windows Diagnostic Policy Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95976" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95977.json b/data/2026/95xxx/CVE-2026-95977.json new file mode 100644 index 0000000000..b9a40bf8e3 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95977.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95977", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:16:10.230Z", + "dateUpdated": "2026-11-10T18:16:10.230Z" + }, + "containers": { + "cna": { + "title": "Windows Event Viewer Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:10.230Z" + }, + "references": [ + { + "name": "Windows Event Viewer Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95977" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95979.json b/data/2026/95xxx/CVE-2026-95979.json new file mode 100644 index 0000000000..c210ee8f38 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95979.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95979", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.176Z", + "datePublished": "2026-11-10T18:16:10.774Z", + "dateUpdated": "2026-11-10T18:16:10.774Z" + }, + "containers": { + "cna": { + "title": "Windows Brokering File System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:10.774Z" + }, + "references": [ + { + "name": "Windows Brokering File System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95979" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95983.json b/data/2026/95xxx/CVE-2026-95983.json new file mode 100644 index 0000000000..e6c8a58f3f --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95983.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95983", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:33:57.177Z", + "datePublished": "2026-11-10T18:17:17.642Z", + "dateUpdated": "2026-11-10T18:17:17.642Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:17.642Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95983" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95987.json b/data/2026/95xxx/CVE-2026-95987.json new file mode 100644 index 0000000000..0d466928e0 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95987.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95987", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.273Z", + "datePublished": "2026-11-10T18:17:18.230Z", + "dateUpdated": "2026-11-10T18:17:18.230Z" + }, + "containers": { + "cna": { + "title": "Windows User Manager Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:18.230Z" + }, + "references": [ + { + "name": "Windows User Manager Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95987" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95988.json b/data/2026/95xxx/CVE-2026-95988.json new file mode 100644 index 0000000000..dab891eb07 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95988.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95988", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.273Z", + "datePublished": "2026-11-10T18:17:18.700Z", + "dateUpdated": "2026-11-10T18:17:18.700Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:18.700Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95988" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95989.json b/data/2026/95xxx/CVE-2026-95989.json new file mode 100644 index 0000000000..2e2855438a --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95989.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95989", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.273Z", + "datePublished": "2026-11-10T18:16:11.431Z", + "dateUpdated": "2026-11-10T18:16:11.431Z" + }, + "containers": { + "cna": { + "title": "vhdmp.sys Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:11.431Z" + }, + "references": [ + { + "name": "vhdmp.sys Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95989" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95991.json b/data/2026/95xxx/CVE-2026-95991.json new file mode 100644 index 0000000000..de8ee17f7d --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95991.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95991", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.274Z", + "datePublished": "2026-11-10T18:17:19.157Z", + "dateUpdated": "2026-11-10T18:17:19.157Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:19.157Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95991" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95996.json b/data/2026/95xxx/CVE-2026-95996.json new file mode 100644 index 0000000000..3c9c81bcc0 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95996.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95996", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.274Z", + "datePublished": "2026-11-10T18:17:19.767Z", + "dateUpdated": "2026-11-10T18:17:19.767Z" + }, + "containers": { + "cna": { + "title": "Windows Bluetooth Port Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:19.767Z" + }, + "references": [ + { + "name": "Windows Bluetooth Port Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95996" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95997.json b/data/2026/95xxx/CVE-2026-95997.json new file mode 100644 index 0000000000..0d91548b80 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95997.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95997", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.274Z", + "datePublished": "2026-11-10T18:17:20.387Z", + "dateUpdated": "2026-11-10T18:17:20.387Z" + }, + "containers": { + "cna": { + "title": "Windows Event Logging Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:20.387Z" + }, + "references": [ + { + "name": "Windows Event Logging Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95997" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95998.json b/data/2026/95xxx/CVE-2026-95998.json new file mode 100644 index 0000000000..fc2715ac57 --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95998.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95998", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.274Z", + "datePublished": "2026-11-10T18:16:11.958Z", + "dateUpdated": "2026-11-10T18:16:11.958Z" + }, + "containers": { + "cna": { + "title": "Windows StateRepository API Tampering Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-306: Missing Authentication for Critical Function", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-306" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:11.958Z" + }, + "references": [ + { + "name": "Windows StateRepository API Tampering Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95998" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.4, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/95xxx/CVE-2026-95999.json b/data/2026/95xxx/CVE-2026-95999.json new file mode 100644 index 0000000000..d7de86bd3a --- /dev/null +++ b/data/2026/95xxx/CVE-2026-95999.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-95999", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.274Z", + "datePublished": "2026-11-10T18:16:12.499Z", + "dateUpdated": "2026-11-10T18:16:12.499Z" + }, + "containers": { + "cna": { + "title": "Windows USB Hub Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:12.499Z" + }, + "references": [ + { + "name": "Windows USB Hub Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95999" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96001.json b/data/2026/96xxx/CVE-2026-96001.json new file mode 100644 index 0000000000..07966abdd9 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96001.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96001", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.274Z", + "datePublished": "2026-11-10T18:16:13.047Z", + "dateUpdated": "2026-11-10T18:16:13.047Z" + }, + "containers": { + "cna": { + "title": "Windows Bluetooth Service Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:13.047Z" + }, + "references": [ + { + "name": "Windows Bluetooth Service Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96001" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96002.json b/data/2026/96xxx/CVE-2026-96002.json new file mode 100644 index 0000000000..ac658f028e --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96002.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96002", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.274Z", + "datePublished": "2026-11-10T18:17:20.920Z", + "dateUpdated": "2026-11-10T18:17:20.920Z" + }, + "containers": { + "cna": { + "title": "Windows Domain Name Service Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:20.920Z" + }, + "references": [ + { + "name": "Windows Domain Name Service Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96002" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96004.json b/data/2026/96xxx/CVE-2026-96004.json new file mode 100644 index 0000000000..5230eb43f5 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96004.json @@ -0,0 +1,540 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96004", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.275Z", + "datePublished": "2026-11-10T18:17:21.468Z", + "dateUpdated": "2026-11-10T18:17:21.468Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:21.468Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96004" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96005.json b/data/2026/96xxx/CVE-2026-96005.json new file mode 100644 index 0000000000..1720b8c0c2 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96005.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96005", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.275Z", + "datePublished": "2026-11-10T18:16:13.506Z", + "dateUpdated": "2026-11-10T18:16:13.506Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:13.506Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96005" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96007.json b/data/2026/96xxx/CVE-2026-96007.json new file mode 100644 index 0000000000..dc7e8bdd0a --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96007.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96007", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.275Z", + "datePublished": "2026-11-10T18:17:22.106Z", + "dateUpdated": "2026-11-10T18:17:22.106Z" + }, + "containers": { + "cna": { + "title": "Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:22.106Z" + }, + "references": [ + { + "name": "Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96007" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96008.json b/data/2026/96xxx/CVE-2026-96008.json new file mode 100644 index 0000000000..61928927a8 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96008.json @@ -0,0 +1,540 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96008", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.275Z", + "datePublished": "2026-11-10T18:16:14.580Z", + "dateUpdated": "2026-11-10T18:16:14.580Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:14.580Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96008" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96010.json b/data/2026/96xxx/CVE-2026-96010.json new file mode 100644 index 0000000000..91c497f0c2 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96010.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96010", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:42:40.275Z", + "datePublished": "2026-11-10T18:16:14.111Z", + "dateUpdated": "2026-11-10T18:16:14.111Z" + }, + "containers": { + "cna": { + "title": "HID Parser Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:14.111Z" + }, + "references": [ + { + "name": "HID Parser Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96010" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96016.json b/data/2026/96xxx/CVE-2026-96016.json new file mode 100644 index 0000000000..d6c5383d6c --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96016.json @@ -0,0 +1,234 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96016", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:17:23.138Z", + "dateUpdated": "2026-11-10T18:17:23.138Z" + }, + "containers": { + "cna": { + "title": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:23.138Z" + }, + "references": [ + { + "name": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96016" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96017.json b/data/2026/96xxx/CVE-2026-96017.json new file mode 100644 index 0000000000..f9d5e26d4e --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96017.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96017", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:17:23.712Z", + "dateUpdated": "2026-11-10T18:17:23.712Z" + }, + "containers": { + "cna": { + "title": "Role: DNS Server Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in DNS Server allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:23.712Z" + }, + "references": [ + { + "name": "Role: DNS Server Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96017" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96018.json b/data/2026/96xxx/CVE-2026-96018.json new file mode 100644 index 0000000000..eee94abc90 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96018.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96018", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:16:15.151Z", + "dateUpdated": "2026-11-10T18:16:15.151Z" + }, + "containers": { + "cna": { + "title": "Windows AppContainer Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-1390: Weak Authentication", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-1390" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:15.151Z" + }, + "references": [ + { + "name": "Windows AppContainer Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96018" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96019.json b/data/2026/96xxx/CVE-2026-96019.json new file mode 100644 index 0000000000..97645f40ff --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96019.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96019", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:17:24.265Z", + "dateUpdated": "2026-11-10T18:17:24.265Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:24.265Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96019" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96020.json b/data/2026/96xxx/CVE-2026-96020.json new file mode 100644 index 0000000000..083baa6470 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96020.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96020", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:17:22.633Z", + "dateUpdated": "2026-11-10T18:17:22.633Z" + }, + "containers": { + "cna": { + "title": "Windows Domain Name Service Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-787: Out-of-bounds Write", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-787" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:22.633Z" + }, + "references": [ + { + "name": "Windows Domain Name Service Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96020" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96022.json b/data/2026/96xxx/CVE-2026-96022.json new file mode 100644 index 0000000000..4914221bc0 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96022.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96022", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:17:24.807Z", + "dateUpdated": "2026-11-10T18:17:24.807Z" + }, + "containers": { + "cna": { + "title": "Windows Text Services Framework Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:24.807Z" + }, + "references": [ + { + "name": "Windows Text Services Framework Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96022" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.6, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96023.json b/data/2026/96xxx/CVE-2026-96023.json new file mode 100644 index 0000000000..db6ec60c59 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96023.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96023", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:17:25.398Z", + "dateUpdated": "2026-11-10T18:17:25.398Z" + }, + "containers": { + "cna": { + "title": "Windows Push Notification Core Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:25.398Z" + }, + "references": [ + { + "name": "Windows Push Notification Core Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96023" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96026.json b/data/2026/96xxx/CVE-2026-96026.json new file mode 100644 index 0000000000..fd98cfb1f8 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96026.json @@ -0,0 +1,540 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96026", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:16:15.772Z", + "dateUpdated": "2026-11-10T18:16:15.772Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:15.772Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96026" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96027.json b/data/2026/96xxx/CVE-2026-96027.json new file mode 100644 index 0000000000..bef14f3560 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96027.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96027", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.724Z", + "datePublished": "2026-11-10T18:17:27.034Z", + "dateUpdated": "2026-11-10T18:17:27.034Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:27.034Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96027" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96028.json b/data/2026/96xxx/CVE-2026-96028.json new file mode 100644 index 0000000000..ec299d436e --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96028.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96028", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.725Z", + "datePublished": "2026-11-10T18:17:27.633Z", + "dateUpdated": "2026-11-10T18:17:27.633Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:27.633Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96028" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96029.json b/data/2026/96xxx/CVE-2026-96029.json new file mode 100644 index 0000000000..0c40c84ef4 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96029.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96029", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.725Z", + "datePublished": "2026-11-10T18:17:25.839Z", + "dateUpdated": "2026-11-10T18:17:25.839Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:25.839Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96029" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96031.json b/data/2026/96xxx/CVE-2026-96031.json new file mode 100644 index 0000000000..e6695cd7a7 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96031.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96031", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.725Z", + "datePublished": "2026-11-10T18:16:16.306Z", + "dateUpdated": "2026-11-10T18:16:16.306Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-787: Out-of-bounds Write", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-787" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:16.306Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96031" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96035.json b/data/2026/96xxx/CVE-2026-96035.json new file mode 100644 index 0000000000..62458dd657 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96035.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96035", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.725Z", + "datePublished": "2026-11-10T18:17:28.184Z", + "dateUpdated": "2026-11-10T18:17:28.184Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:28.184Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96035" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96036.json b/data/2026/96xxx/CVE-2026-96036.json new file mode 100644 index 0000000000..6d5716f103 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96036.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96036", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.725Z", + "datePublished": "2026-11-10T18:17:28.709Z", + "dateUpdated": "2026-11-10T18:17:28.709Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:28.709Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96036" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96037.json b/data/2026/96xxx/CVE-2026-96037.json new file mode 100644 index 0000000000..42ccf50e43 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96037.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96037", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.725Z", + "datePublished": "2026-11-10T18:17:26.448Z", + "dateUpdated": "2026-11-10T18:17:26.448Z" + }, + "containers": { + "cna": { + "title": "Windows User Manager Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:26.448Z" + }, + "references": [ + { + "name": "Windows User Manager Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96037" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96038.json b/data/2026/96xxx/CVE-2026-96038.json new file mode 100644 index 0000000000..763596ea94 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96038.json @@ -0,0 +1,392 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96038", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T17:50:37.725Z", + "datePublished": "2026-11-10T18:17:29.222Z", + "dateUpdated": "2026-11-10T18:17:29.222Z" + }, + "containers": { + "cna": { + "title": "Windows Audio Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-829" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:29.222Z" + }, + "references": [ + { + "name": "Windows Audio Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96038" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96041.json b/data/2026/96xxx/CVE-2026-96041.json new file mode 100644 index 0000000000..2afc0a8595 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96041.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96041", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.513Z", + "datePublished": "2026-11-10T18:17:29.847Z", + "dateUpdated": "2026-11-10T18:17:29.847Z" + }, + "containers": { + "cna": { + "title": "Windows USB Hub Driver Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:29.847Z" + }, + "references": [ + { + "name": "Windows USB Hub Driver Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96041" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96042.json b/data/2026/96xxx/CVE-2026-96042.json new file mode 100644 index 0000000000..c4db04b57d --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96042.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96042", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.513Z", + "datePublished": "2026-11-10T18:17:30.391Z", + "dateUpdated": "2026-11-10T18:17:30.391Z" + }, + "containers": { + "cna": { + "title": "Windows Connection Manager Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:30.391Z" + }, + "references": [ + { + "name": "Windows Connection Manager Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96042" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96043.json b/data/2026/96xxx/CVE-2026-96043.json new file mode 100644 index 0000000000..d3923487b9 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96043.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96043", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.513Z", + "datePublished": "2026-11-10T18:16:16.836Z", + "dateUpdated": "2026-11-10T18:16:16.836Z" + }, + "containers": { + "cna": { + "title": "Windows Connection Manager Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:16.836Z" + }, + "references": [ + { + "name": "Windows Connection Manager Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96043" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96046.json b/data/2026/96xxx/CVE-2026-96046.json new file mode 100644 index 0000000000..371d956962 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96046.json @@ -0,0 +1,540 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96046", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:16:17.286Z", + "dateUpdated": "2026-11-10T18:16:17.286Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:17.286Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96046" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96047.json b/data/2026/96xxx/CVE-2026-96047.json new file mode 100644 index 0000000000..201fdfa02a --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96047.json @@ -0,0 +1,540 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96047", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:16:17.877Z", + "dateUpdated": "2026-11-10T18:16:17.877Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:17.877Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96047" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96048.json b/data/2026/96xxx/CVE-2026-96048.json new file mode 100644 index 0000000000..7b51f6c1d7 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96048.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96048", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:16:18.485Z", + "dateUpdated": "2026-11-10T18:16:18.485Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:18.485Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96048" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96051.json b/data/2026/96xxx/CVE-2026-96051.json new file mode 100644 index 0000000000..73baae5293 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96051.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96051", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:17:30.917Z", + "dateUpdated": "2026-11-10T18:17:30.917Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:30.917Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96051" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96052.json b/data/2026/96xxx/CVE-2026-96052.json new file mode 100644 index 0000000000..c33c11e4c2 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96052.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96052", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:16:19.612Z", + "dateUpdated": "2026-11-10T18:16:19.612Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:19.612Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96052" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96053.json b/data/2026/96xxx/CVE-2026-96053.json new file mode 100644 index 0000000000..2e40662320 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96053.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96053", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:16:20.204Z", + "dateUpdated": "2026-11-10T18:16:20.204Z" + }, + "containers": { + "cna": { + "title": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-77" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:20.204Z" + }, + "references": [ + { + "name": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96053" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96054.json b/data/2026/96xxx/CVE-2026-96054.json new file mode 100644 index 0000000000..32408f489f --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96054.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96054", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:16:19.008Z", + "dateUpdated": "2026-11-10T18:16:19.008Z" + }, + "containers": { + "cna": { + "title": "Microsoft Color Management Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:19.008Z" + }, + "references": [ + { + "name": "Microsoft Color Management Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96054" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96055.json b/data/2026/96xxx/CVE-2026-96055.json new file mode 100644 index 0000000000..5a89c6c96f --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96055.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96055", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:17:31.457Z", + "dateUpdated": "2026-11-10T18:17:31.457Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:31.457Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96055" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96056.json b/data/2026/96xxx/CVE-2026-96056.json new file mode 100644 index 0000000000..a3c9eb9e47 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96056.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96056", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.514Z", + "datePublished": "2026-11-10T18:16:20.717Z", + "dateUpdated": "2026-11-10T18:16:20.717Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:20.717Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96056" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96057.json b/data/2026/96xxx/CVE-2026-96057.json new file mode 100644 index 0000000000..4b21d3b727 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96057.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96057", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.515Z", + "datePublished": "2026-11-10T18:17:31.966Z", + "dateUpdated": "2026-11-10T18:17:31.966Z" + }, + "containers": { + "cna": { + "title": "Windows USB Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:31.966Z" + }, + "references": [ + { + "name": "Windows USB Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96057" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96058.json b/data/2026/96xxx/CVE-2026-96058.json new file mode 100644 index 0000000000..11f619bdcb --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96058.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96058", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.515Z", + "datePublished": "2026-11-10T18:16:21.202Z", + "dateUpdated": "2026-11-10T18:16:21.202Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:21.202Z" + }, + "references": [ + { + "name": "Windows Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96058" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.6, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96059.json b/data/2026/96xxx/CVE-2026-96059.json new file mode 100644 index 0000000000..8fca21e4f1 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96059.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96059", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.515Z", + "datePublished": "2026-11-10T18:16:21.735Z", + "dateUpdated": "2026-11-10T18:16:21.735Z" + }, + "containers": { + "cna": { + "title": "HID class driver Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in HID class driver allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:21.735Z" + }, + "references": [ + { + "name": "HID class driver Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96059" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96060.json b/data/2026/96xxx/CVE-2026-96060.json new file mode 100644 index 0000000000..5baf1afc07 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96060.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96060", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.515Z", + "datePublished": "2026-11-10T18:17:32.489Z", + "dateUpdated": "2026-11-10T18:17:32.489Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:32.489Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96060" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96061.json b/data/2026/96xxx/CVE-2026-96061.json new file mode 100644 index 0000000000..49401b9156 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96061.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96061", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.515Z", + "datePublished": "2026-11-10T18:17:32.997Z", + "dateUpdated": "2026-11-10T18:17:32.997Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:32.997Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96061" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96062.json b/data/2026/96xxx/CVE-2026-96062.json new file mode 100644 index 0000000000..687654e361 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96062.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96062", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.515Z", + "datePublished": "2026-11-10T18:16:22.254Z", + "dateUpdated": "2026-11-10T18:16:22.254Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:22.254Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96062" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96064.json b/data/2026/96xxx/CVE-2026-96064.json new file mode 100644 index 0000000000..bc8c66613a --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96064.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96064", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.515Z", + "datePublished": "2026-11-10T18:16:22.787Z", + "dateUpdated": "2026-11-10T18:16:22.787Z" + }, + "containers": { + "cna": { + "title": "Windows Domain Name Service Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:22.787Z" + }, + "references": [ + { + "name": "Windows Domain Name Service Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96064" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96066.json b/data/2026/96xxx/CVE-2026-96066.json new file mode 100644 index 0000000000..fc97684868 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96066.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96066", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:01:58.515Z", + "datePublished": "2026-11-10T18:16:23.396Z", + "dateUpdated": "2026-11-10T18:16:23.396Z" + }, + "containers": { + "cna": { + "title": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:23.396Z" + }, + "references": [ + { + "name": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96066" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96067.json b/data/2026/96xxx/CVE-2026-96067.json new file mode 100644 index 0000000000..f15c80eecf --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96067.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96067", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.045Z", + "datePublished": "2026-11-10T18:17:33.530Z", + "dateUpdated": "2026-11-10T18:17:33.530Z" + }, + "containers": { + "cna": { + "title": "Microsoft Color Management Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:33.530Z" + }, + "references": [ + { + "name": "Microsoft Color Management Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96067" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96072.json b/data/2026/96xxx/CVE-2026-96072.json new file mode 100644 index 0000000000..1d9217b9c6 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96072.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96072", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.045Z", + "datePublished": "2026-11-10T18:16:23.837Z", + "dateUpdated": "2026-11-10T18:16:23.837Z" + }, + "containers": { + "cna": { + "title": "Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:23.837Z" + }, + "references": [ + { + "name": "Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96072" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96073.json b/data/2026/96xxx/CVE-2026-96073.json new file mode 100644 index 0000000000..5e850db392 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96073.json @@ -0,0 +1,540 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96073", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.045Z", + "datePublished": "2026-11-10T18:17:34.079Z", + "dateUpdated": "2026-11-10T18:17:34.079Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:34.079Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96073" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96074.json b/data/2026/96xxx/CVE-2026-96074.json new file mode 100644 index 0000000000..140e18c13d --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96074.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96074", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.045Z", + "datePublished": "2026-11-10T18:17:34.539Z", + "dateUpdated": "2026-11-10T18:17:34.539Z" + }, + "containers": { + "cna": { + "title": "Windows AppX Package Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:34.539Z" + }, + "references": [ + { + "name": "Windows AppX Package Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96074" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96075.json b/data/2026/96xxx/CVE-2026-96075.json new file mode 100644 index 0000000000..2bbda0f791 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96075.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96075", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:17:35.067Z", + "dateUpdated": "2026-11-10T18:17:35.067Z" + }, + "containers": { + "cna": { + "title": "Windows Feedback Hub Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:35.067Z" + }, + "references": [ + { + "name": "Windows Feedback Hub Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96075" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96076.json b/data/2026/96xxx/CVE-2026-96076.json new file mode 100644 index 0000000000..a219d22921 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96076.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96076", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:17:35.585Z", + "dateUpdated": "2026-11-10T18:17:35.585Z" + }, + "containers": { + "cna": { + "title": "Windows DIAL Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:35.585Z" + }, + "references": [ + { + "name": "Windows DIAL Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96076" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96077.json b/data/2026/96xxx/CVE-2026-96077.json new file mode 100644 index 0000000000..0dc195d2b9 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96077.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96077", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:16:24.277Z", + "dateUpdated": "2026-11-10T18:16:24.277Z" + }, + "containers": { + "cna": { + "title": "Windows TCP/IP Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:24.277Z" + }, + "references": [ + { + "name": "Windows TCP/IP Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96077" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96078.json b/data/2026/96xxx/CVE-2026-96078.json new file mode 100644 index 0000000000..d0fa41f580 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96078.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96078", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:16:24.741Z", + "dateUpdated": "2026-11-10T18:16:24.741Z" + }, + "containers": { + "cna": { + "title": "Microsoft Color Management Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + }, + { + "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-191" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:24.741Z" + }, + "references": [ + { + "name": "Microsoft Color Management Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96078" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96081.json b/data/2026/96xxx/CVE-2026-96081.json new file mode 100644 index 0000000000..581187197d --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96081.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96081", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:16:25.261Z", + "dateUpdated": "2026-11-10T18:16:25.261Z" + }, + "containers": { + "cna": { + "title": "Windows Rich Text Edit Control Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:25.261Z" + }, + "references": [ + { + "name": "Windows Rich Text Edit Control Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96081" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96082.json b/data/2026/96xxx/CVE-2026-96082.json new file mode 100644 index 0000000000..4c210a849b --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96082.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96082", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:16:25.709Z", + "dateUpdated": "2026-11-10T18:16:25.709Z" + }, + "containers": { + "cna": { + "title": "Windows Kerberos Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:25.709Z" + }, + "references": [ + { + "name": "Windows Kerberos Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96082" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96084.json b/data/2026/96xxx/CVE-2026-96084.json new file mode 100644 index 0000000000..3b7bffa67e --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96084.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96084", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:16:26.302Z", + "dateUpdated": "2026-11-10T18:16:26.302Z" + }, + "containers": { + "cna": { + "title": "Graphic Fonts Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:26.302Z" + }, + "references": [ + { + "name": "Graphic Fonts Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96084" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96085.json b/data/2026/96xxx/CVE-2026-96085.json new file mode 100644 index 0000000000..cf92b5b0b3 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96085.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96085", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:16:26.880Z", + "dateUpdated": "2026-11-10T18:16:26.880Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:26.880Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96085" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96086.json b/data/2026/96xxx/CVE-2026-96086.json new file mode 100644 index 0000000000..e743482773 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96086.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96086", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.046Z", + "datePublished": "2026-11-10T18:17:36.098Z", + "dateUpdated": "2026-11-10T18:17:36.098Z" + }, + "containers": { + "cna": { + "title": "Windows WLAN Service Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:36.098Z" + }, + "references": [ + { + "name": "Windows WLAN Service Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96086" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.5, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96088.json b/data/2026/96xxx/CVE-2026-96088.json new file mode 100644 index 0000000000..c29715e2e3 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96088.json @@ -0,0 +1,276 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96088", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.047Z", + "datePublished": "2026-11-10T18:17:36.626Z", + "dateUpdated": "2026-11-10T18:17:36.626Z" + }, + "containers": { + "cna": { + "title": "Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:36.626Z" + }, + "references": [ + { + "name": "Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96088" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96092.json b/data/2026/96xxx/CVE-2026-96092.json new file mode 100644 index 0000000000..08ad547885 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96092.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96092", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:10:59.047Z", + "datePublished": "2026-11-10T18:17:37.211Z", + "dateUpdated": "2026-11-10T18:17:37.211Z" + }, + "containers": { + "cna": { + "title": "Windows Domain Name Service Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in DNS Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:37.211Z" + }, + "references": [ + { + "name": "Windows Domain Name Service Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96092" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96093.json b/data/2026/96xxx/CVE-2026-96093.json new file mode 100644 index 0000000000..5bb6158b9d --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96093.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96093", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.215Z", + "datePublished": "2026-11-10T18:17:37.736Z", + "dateUpdated": "2026-11-10T18:17:37.736Z" + }, + "containers": { + "cna": { + "title": "Windows Internet (wininet.dll) Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:37.736Z" + }, + "references": [ + { + "name": "Windows Internet (wininet.dll) Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96093" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96097.json b/data/2026/96xxx/CVE-2026-96097.json new file mode 100644 index 0000000000..679dab66c8 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96097.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96097", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.216Z", + "datePublished": "2026-11-10T18:17:38.253Z", + "dateUpdated": "2026-11-10T18:17:38.253Z" + }, + "containers": { + "cna": { + "title": "Windows Brokering File System Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:38.253Z" + }, + "references": [ + { + "name": "Windows Brokering File System Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96097" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96101.json b/data/2026/96xxx/CVE-2026-96101.json new file mode 100644 index 0000000000..641d9d1f6b --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96101.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96101", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.216Z", + "datePublished": "2026-11-10T18:16:27.462Z", + "dateUpdated": "2026-11-10T18:16:27.462Z" + }, + "containers": { + "cna": { + "title": "Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-552: Files or Directories Accessible to External Parties", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-552" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:27.462Z" + }, + "references": [ + { + "name": "Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96101" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96102.json b/data/2026/96xxx/CVE-2026-96102.json new file mode 100644 index 0000000000..ccd0951181 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96102.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96102", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.216Z", + "datePublished": "2026-11-10T18:16:28.078Z", + "dateUpdated": "2026-11-10T18:16:28.078Z" + }, + "containers": { + "cna": { + "title": "Windows TCP/IP Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:28.078Z" + }, + "references": [ + { + "name": "Windows TCP/IP Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96102" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96103.json b/data/2026/96xxx/CVE-2026-96103.json new file mode 100644 index 0000000000..2f4dbbd09c --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96103.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96103", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.216Z", + "datePublished": "2026-11-10T18:17:39.797Z", + "dateUpdated": "2026-11-10T18:17:39.797Z" + }, + "containers": { + "cna": { + "title": "Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:39.797Z" + }, + "references": [ + { + "name": "Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96103" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96107.json b/data/2026/96xxx/CVE-2026-96107.json new file mode 100644 index 0000000000..e71f5d2eac --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96107.json @@ -0,0 +1,303 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96107", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.217Z", + "datePublished": "2026-11-10T18:17:40.310Z", + "dateUpdated": "2026-11-10T18:17:40.310Z" + }, + "containers": { + "cna": { + "title": "Windows Phone Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:40.310Z" + }, + "references": [ + { + "name": "Windows Phone Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96107" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96110.json b/data/2026/96xxx/CVE-2026-96110.json new file mode 100644 index 0000000000..b2608e7a58 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96110.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96110", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.217Z", + "datePublished": "2026-11-10T18:17:40.823Z", + "dateUpdated": "2026-11-10T18:17:40.823Z" + }, + "containers": { + "cna": { + "title": "Windows OLE Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows OLE allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:40.823Z" + }, + "references": [ + { + "name": "Windows OLE Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96110" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96112.json b/data/2026/96xxx/CVE-2026-96112.json new file mode 100644 index 0000000000..c92ab1df48 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96112.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96112", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.217Z", + "datePublished": "2026-11-10T18:16:28.521Z", + "dateUpdated": "2026-11-10T18:16:28.521Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:28.521Z" + }, + "references": [ + { + "name": "Windows DNS Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96112" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96115.json b/data/2026/96xxx/CVE-2026-96115.json new file mode 100644 index 0000000000..cda5514dd1 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96115.json @@ -0,0 +1,219 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96115", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.217Z", + "datePublished": "2026-11-10T18:16:29.031Z", + "dateUpdated": "2026-11-10T18:16:29.031Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Client Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:29.031Z" + }, + "references": [ + { + "name": "Windows DHCP Client Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96115" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8, + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96117.json b/data/2026/96xxx/CVE-2026-96117.json new file mode 100644 index 0000000000..883fa6d9ec --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96117.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96117", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:19:24.217Z", + "datePublished": "2026-11-10T18:16:29.481Z", + "dateUpdated": "2026-11-10T18:16:29.481Z" + }, + "containers": { + "cna": { + "title": "Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:29.481Z" + }, + "references": [ + { + "name": "Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96117" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96122.json b/data/2026/96xxx/CVE-2026-96122.json new file mode 100644 index 0000000000..e857eb63b6 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96122.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96122", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.908Z", + "datePublished": "2026-11-10T18:17:41.273Z", + "dateUpdated": "2026-11-10T18:17:41.273Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:41.273Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96122" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96124.json b/data/2026/96xxx/CVE-2026-96124.json new file mode 100644 index 0000000000..29f6bb73df --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96124.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96124", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.908Z", + "datePublished": "2026-11-10T18:17:41.793Z", + "dateUpdated": "2026-11-10T18:17:41.793Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:41.793Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96124" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96126.json b/data/2026/96xxx/CVE-2026-96126.json new file mode 100644 index 0000000000..24396de1cd --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96126.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96126", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.908Z", + "datePublished": "2026-11-10T18:16:29.997Z", + "dateUpdated": "2026-11-10T18:16:29.997Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:29.997Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96126" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96127.json b/data/2026/96xxx/CVE-2026-96127.json new file mode 100644 index 0000000000..23af1517ca --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96127.json @@ -0,0 +1,428 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96127", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.908Z", + "datePublished": "2026-11-10T18:17:42.536Z", + "dateUpdated": "2026-11-10T18:17:42.536Z" + }, + "containers": { + "cna": { + "title": "Windows Biometric Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9512" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9245" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7725" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7725" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5622" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7582" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7582" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9445" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9445" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33438" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33438" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.2954" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7725", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7725", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7582", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7582", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9445", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9445", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.2954", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9512", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9245", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5622", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33438", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33438", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:42.536Z" + }, + "references": [ + { + "name": "Windows Biometric Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96127" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96129.json b/data/2026/96xxx/CVE-2026-96129.json new file mode 100644 index 0000000000..177b9f8b50 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96129.json @@ -0,0 +1,171 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96129", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.908Z", + "datePublished": "2026-11-10T18:16:30.526Z", + "dateUpdated": "2026-11-10T18:16:30.526Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-829" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:30.526Z" + }, + "references": [ + { + "name": "Windows Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96129" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96133.json b/data/2026/96xxx/CVE-2026-96133.json new file mode 100644 index 0000000000..010f586eaa --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96133.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96133", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.909Z", + "datePublished": "2026-11-10T18:16:31.032Z", + "dateUpdated": "2026-11-10T18:16:31.032Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:31.032Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96133" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96134.json b/data/2026/96xxx/CVE-2026-96134.json new file mode 100644 index 0000000000..36234214ad --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96134.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96134", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.909Z", + "datePublished": "2026-11-10T18:16:31.618Z", + "dateUpdated": "2026-11-10T18:16:31.618Z" + }, + "containers": { + "cna": { + "title": "Windows DHCP Server Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:31.618Z" + }, + "references": [ + { + "name": "Windows DHCP Server Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96134" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96137.json b/data/2026/96xxx/CVE-2026-96137.json new file mode 100644 index 0000000000..34e496911f --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96137.json @@ -0,0 +1,213 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96137", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.909Z", + "datePublished": "2026-11-10T18:16:32.138Z", + "dateUpdated": "2026-11-10T18:16:32.138Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-497" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:32.138Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96137" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96139.json b/data/2026/96xxx/CVE-2026-96139.json new file mode 100644 index 0000000000..48a2fb0184 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96139.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96139", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.909Z", + "datePublished": "2026-11-10T18:17:43.156Z", + "dateUpdated": "2026-11-10T18:17:43.156Z" + }, + "containers": { + "cna": { + "title": "Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:43.156Z" + }, + "references": [ + { + "name": "Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96139" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96144.json b/data/2026/96xxx/CVE-2026-96144.json new file mode 100644 index 0000000000..417946f750 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96144.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96144", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:28:55.909Z", + "datePublished": "2026-11-10T18:16:32.584Z", + "dateUpdated": "2026-11-10T18:16:32.584Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:32.584Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96144" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96146.json b/data/2026/96xxx/CVE-2026-96146.json index faf2726708..13e601ec0a 100644 --- a/data/2026/96xxx/CVE-2026-96146.json +++ b/data/2026/96xxx/CVE-2026-96146.json @@ -8,7 +8,7 @@ "assignerShortName": "ibm", "dateReserved": "2026-09-22T18:37:41.901Z", "datePublished": "2026-11-08T19:44:23.101Z", - "dateUpdated": "2026-11-08T19:44:23.101Z" + "dateUpdated": "2026-11-10T17:53:27.847Z" }, "containers": { "cna": { @@ -108,6 +108,40 @@ ] } ] - } + }, + "adp": [ + { + "metrics": [ + { + "other": { + "type": "ssvc", + "content": { + "timestamp": "2026-11-10T16:29:42.473933Z", + "id": "CVE-2026-96146", + "options": [ + { + "Exploitation": "none" + }, + { + "Automatable": "yes" + }, + { + "Technical Impact": "partial" + } + ], + "role": "CISA Coordinator", + "version": "2.0.3" + } + } + } + ], + "title": "CISA ADP Vulnrichment", + "providerMetadata": { + "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "shortName": "CISA-ADP", + "dateUpdated": "2026-11-10T17:53:27.847Z" + } + } + ] } } \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96150.json b/data/2026/96xxx/CVE-2026-96150.json new file mode 100644 index 0000000000..36b7dda462 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96150.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96150", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.299Z", + "datePublished": "2026-11-10T18:16:33.092Z", + "dateUpdated": "2026-11-10T18:16:33.092Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows Codecs Library Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:33.092Z" + }, + "references": [ + { + "name": "Microsoft Windows Codecs Library Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96150" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.6, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96152.json b/data/2026/96xxx/CVE-2026-96152.json new file mode 100644 index 0000000000..33b450364c --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96152.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96152", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.299Z", + "datePublished": "2026-11-10T18:16:33.546Z", + "dateUpdated": "2026-11-10T18:16:33.546Z" + }, + "containers": { + "cna": { + "title": "Windows Installer Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-121: Stack-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-121" + }, + { + "description": "CWE-681: Incorrect Conversion between Numeric Types", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-681" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:33.546Z" + }, + "references": [ + { + "name": "Windows Installer Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96152" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96153.json b/data/2026/96xxx/CVE-2026-96153.json new file mode 100644 index 0000000000..59f66b8aa6 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96153.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96153", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.299Z", + "datePublished": "2026-11-10T18:17:43.680Z", + "dateUpdated": "2026-11-10T18:17:43.680Z" + }, + "containers": { + "cna": { + "title": "Windows Error Reporting Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:43.680Z" + }, + "references": [ + { + "name": "Windows Error Reporting Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96153" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96155.json b/data/2026/96xxx/CVE-2026-96155.json new file mode 100644 index 0000000000..5f2ec7210b --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96155.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96155", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.299Z", + "datePublished": "2026-11-10T18:17:44.138Z", + "dateUpdated": "2026-11-10T18:17:44.138Z" + }, + "containers": { + "cna": { + "title": "Windows Audio Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:44.138Z" + }, + "references": [ + { + "name": "Windows Audio Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96155" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96156.json b/data/2026/96xxx/CVE-2026-96156.json new file mode 100644 index 0000000000..d4c1a45331 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96156.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96156", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.299Z", + "datePublished": "2026-11-10T18:17:44.676Z", + "dateUpdated": "2026-11-10T18:17:44.676Z" + }, + "containers": { + "cna": { + "title": "Windows Broker Infrastructure Service Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + }, + { + "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-200" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:44.676Z" + }, + "references": [ + { + "name": "Windows Broker Infrastructure Service Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96156" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96157.json b/data/2026/96xxx/CVE-2026-96157.json new file mode 100644 index 0000000000..00d5e96b42 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96157.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96157", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.299Z", + "datePublished": "2026-11-10T18:17:45.230Z", + "dateUpdated": "2026-11-10T18:17:45.230Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:45.230Z" + }, + "references": [ + { + "name": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96157" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "CRITICAL", + "baseScore": 9.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96158.json b/data/2026/96xxx/CVE-2026-96158.json new file mode 100644 index 0000000000..d184a79d20 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96158.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96158", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.300Z", + "datePublished": "2026-11-10T18:16:34.082Z", + "dateUpdated": "2026-11-10T18:16:34.082Z" + }, + "containers": { + "cna": { + "title": "Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-908: Use of Uninitialized Resource", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-908" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:34.082Z" + }, + "references": [ + { + "name": "Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96158" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96160.json b/data/2026/96xxx/CVE-2026-96160.json new file mode 100644 index 0000000000..ca942751aa --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96160.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96160", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.300Z", + "datePublished": "2026-11-10T18:17:45.791Z", + "dateUpdated": "2026-11-10T18:17:45.791Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:45.791Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96160" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96162.json b/data/2026/96xxx/CVE-2026-96162.json new file mode 100644 index 0000000000..ee3e52c185 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96162.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96162", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.300Z", + "datePublished": "2026-11-10T18:17:46.614Z", + "dateUpdated": "2026-11-10T18:17:46.614Z" + }, + "containers": { + "cna": { + "title": "Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-863: Incorrect Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-863" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:46.614Z" + }, + "references": [ + { + "name": "Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96162" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96164.json b/data/2026/96xxx/CVE-2026-96164.json new file mode 100644 index 0000000000..d2608a892a --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96164.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96164", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.300Z", + "datePublished": "2026-11-10T18:16:34.644Z", + "dateUpdated": "2026-11-10T18:16:34.644Z" + }, + "containers": { + "cna": { + "title": "Windows Imaging Component Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:34.644Z" + }, + "references": [ + { + "name": "Windows Imaging Component Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96164" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.8, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96168.json b/data/2026/96xxx/CVE-2026-96168.json new file mode 100644 index 0000000000..205b07911c --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96168.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96168", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.300Z", + "datePublished": "2026-11-10T18:17:47.158Z", + "dateUpdated": "2026-11-10T18:17:47.158Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-822: Untrusted Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-822" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:47.158Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96168" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96171.json b/data/2026/96xxx/CVE-2026-96171.json new file mode 100644 index 0000000000..2c51eb52d2 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96171.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96171", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.301Z", + "datePublished": "2026-11-10T18:16:35.247Z", + "dateUpdated": "2026-11-10T18:16:35.247Z" + }, + "containers": { + "cna": { + "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + }, + { + "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-362" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:35.247Z" + }, + "references": [ + { + "name": "Windows Graphics Kernel Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96171" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96172.json b/data/2026/96xxx/CVE-2026-96172.json new file mode 100644 index 0000000000..0226ecd3ee --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96172.json @@ -0,0 +1,364 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96172", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:40:26.301Z", + "datePublished": "2026-11-10T18:17:47.691Z", + "dateUpdated": "2026-11-10T18:17:47.691Z" + }, + "containers": { + "cna": { + "title": "Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:47.691Z" + }, + "references": [ + { + "name": "Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96172" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96174.json b/data/2026/96xxx/CVE-2026-96174.json new file mode 100644 index 0000000000..06bbdc3f9d --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96174.json @@ -0,0 +1,364 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96174", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:48:47.470Z", + "datePublished": "2026-11-10T18:16:35.851Z", + "dateUpdated": "2026-11-10T18:16:35.851Z" + }, + "containers": { + "cna": { + "title": "Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:35.851Z" + }, + "references": [ + { + "name": "Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96174" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96175.json b/data/2026/96xxx/CVE-2026-96175.json new file mode 100644 index 0000000000..dcbb846eac --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96175.json @@ -0,0 +1,364 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96175", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:48:47.470Z", + "datePublished": "2026-11-10T18:17:48.291Z", + "dateUpdated": "2026-11-10T18:17:48.291Z" + }, + "containers": { + "cna": { + "title": "Desktop Window Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:48.291Z" + }, + "references": [ + { + "name": "Desktop Window Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96175" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96176.json b/data/2026/96xxx/CVE-2026-96176.json new file mode 100644 index 0000000000..08d84a70d6 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96176.json @@ -0,0 +1,255 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96176", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:48:47.470Z", + "datePublished": "2026-11-10T18:16:36.296Z", + "dateUpdated": "2026-11-10T18:16:36.296Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-401: Missing Release of Memory after Effective Lifetime", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-401" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:36.296Z" + }, + "references": [ + { + "name": "Windows DNS Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96176" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96177.json b/data/2026/96xxx/CVE-2026-96177.json new file mode 100644 index 0000000000..16217fa70b --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96177.json @@ -0,0 +1,125 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96177", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:48:47.470Z", + "datePublished": "2026-11-10T18:16:36.814Z", + "dateUpdated": "2026-11-10T18:16:36.814Z" + }, + "containers": { + "cna": { + "title": "Windows Domain Name Service Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in DNS Server allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:36.814Z" + }, + "references": [ + { + "name": "Windows Domain Name Service Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96177" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 8.1, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96179.json b/data/2026/96xxx/CVE-2026-96179.json new file mode 100644 index 0000000000..df86439856 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96179.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96179", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:48:47.470Z", + "datePublished": "2026-11-10T18:16:37.410Z", + "dateUpdated": "2026-11-10T18:16:37.410Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in DNS Server allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:37.410Z" + }, + "references": [ + { + "name": "Windows DNS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96179" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.7, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96184.json b/data/2026/96xxx/CVE-2026-96184.json new file mode 100644 index 0000000000..b4c48da2aa --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96184.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96184", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-22T18:48:47.471Z", + "datePublished": "2026-11-10T18:16:37.933Z", + "dateUpdated": "2026-11-10T18:16:37.933Z" + }, + "containers": { + "cna": { + "title": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:37.933Z" + }, + "references": [ + { + "name": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96184" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96845.json b/data/2026/96xxx/CVE-2026-96845.json new file mode 100644 index 0000000000..d18328ac9d --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96845.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96845", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T18:05:21.200Z", + "datePublished": "2026-11-10T18:20:04.474Z", + "dateUpdated": "2026-11-10T18:20:04.474Z" + }, + "containers": { + "cna": { + "title": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-862: Missing Authorization", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-862" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:20:04.474Z" + }, + "references": [ + { + "name": "Windows Task Scheduler Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96845" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96965.json b/data/2026/96xxx/CVE-2026-96965.json new file mode 100644 index 0000000000..2fcab161b4 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96965.json @@ -0,0 +1,446 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96965", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.976Z", + "datePublished": "2026-11-10T18:16:41.385Z", + "dateUpdated": "2026-11-10T18:16:41.385Z" + }, + "containers": { + "cna": { + "title": "Windows Hyper-V Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:41.385Z" + }, + "references": [ + { + "name": "Windows Hyper-V Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96965" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96969.json b/data/2026/96xxx/CVE-2026-96969.json new file mode 100644 index 0000000000..5a0526574d --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96969.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96969", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.976Z", + "datePublished": "2026-11-10T18:17:55.572Z", + "dateUpdated": "2026-11-10T18:17:55.572Z" + }, + "containers": { + "cna": { + "title": "Windows TCP/IP Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-415: Double Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-415" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:55.572Z" + }, + "references": [ + { + "name": "Windows TCP/IP Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96969" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96970.json b/data/2026/96xxx/CVE-2026-96970.json new file mode 100644 index 0000000000..49b83cb9ea --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96970.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96970", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.976Z", + "datePublished": "2026-11-10T18:16:45.295Z", + "dateUpdated": "2026-11-10T18:16:45.295Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:45.295Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96970" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96971.json b/data/2026/96xxx/CVE-2026-96971.json new file mode 100644 index 0000000000..57b339cbad --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96971.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96971", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.976Z", + "datePublished": "2026-11-10T18:17:55.121Z", + "dateUpdated": "2026-11-10T18:17:55.121Z" + }, + "containers": { + "cna": { + "title": "Windows NetBIOS Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:55.121Z" + }, + "references": [ + { + "name": "Windows NetBIOS Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96971" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96972.json b/data/2026/96xxx/CVE-2026-96972.json new file mode 100644 index 0000000000..2db481080b --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96972.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96972", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:16:45.806Z", + "dateUpdated": "2026-11-10T18:16:45.806Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Server Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:45.806Z" + }, + "references": [ + { + "name": "Windows DNS Server Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96972" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96973.json b/data/2026/96xxx/CVE-2026-96973.json new file mode 100644 index 0000000000..c960a0c0e3 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96973.json @@ -0,0 +1,386 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96973", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:17:54.075Z", + "dateUpdated": "2026-11-10T18:17:54.075Z" + }, + "containers": { + "cna": { + "title": "Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:54.075Z" + }, + "references": [ + { + "name": "Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96973" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96974.json b/data/2026/96xxx/CVE-2026-96974.json new file mode 100644 index 0000000000..3a843bf4e8 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96974.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96974", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:17:51.606Z", + "dateUpdated": "2026-11-10T18:17:51.606Z" + }, + "containers": { + "cna": { + "title": "HID Parser Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:51.606Z" + }, + "references": [ + { + "name": "HID Parser Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96974" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96975.json b/data/2026/96xxx/CVE-2026-96975.json new file mode 100644 index 0000000000..17578ac7c9 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96975.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96975", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:17:56.680Z", + "dateUpdated": "2026-11-10T18:17:56.680Z" + }, + "containers": { + "cna": { + "title": "Role: DNS Server Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:56.680Z" + }, + "references": [ + { + "name": "Role: DNS Server Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96975" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.9, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96976.json b/data/2026/96xxx/CVE-2026-96976.json new file mode 100644 index 0000000000..b647d2768a --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96976.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96976", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:16:44.773Z", + "dateUpdated": "2026-11-10T18:16:44.773Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:44.773Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96976" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96978.json b/data/2026/96xxx/CVE-2026-96978.json new file mode 100644 index 0000000000..eda078d44e --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96978.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96978", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:16:40.806Z", + "dateUpdated": "2026-11-10T18:16:40.806Z" + }, + "containers": { + "cna": { + "title": "Windows Credential User Interface Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:40.806Z" + }, + "references": [ + { + "name": "Windows Credential User Interface Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96978" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96979.json b/data/2026/96xxx/CVE-2026-96979.json new file mode 100644 index 0000000000..c641255f44 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96979.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96979", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:17:53.620Z", + "dateUpdated": "2026-11-10T18:17:53.620Z" + }, + "containers": { + "cna": { + "title": "HID Parser Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:53.620Z" + }, + "references": [ + { + "name": "HID Parser Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96979" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96980.json b/data/2026/96xxx/CVE-2026-96980.json new file mode 100644 index 0000000000..6171eed751 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96980.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96980", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:17:57.277Z", + "dateUpdated": "2026-11-10T18:17:57.277Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:57.277Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96980" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96981.json b/data/2026/96xxx/CVE-2026-96981.json new file mode 100644 index 0000000000..3fc2e6aebf --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96981.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96981", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:16:43.554Z", + "dateUpdated": "2026-11-10T18:16:43.554Z" + }, + "containers": { + "cna": { + "title": "Windows PCI Bus Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-787: Out-of-bounds Write", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-787" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:43.554Z" + }, + "references": [ + { + "name": "Windows PCI Bus Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96981" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96982.json b/data/2026/96xxx/CVE-2026-96982.json new file mode 100644 index 0000000000..49d7b64ce3 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96982.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96982", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:17:52.053Z", + "dateUpdated": "2026-11-10T18:17:52.053Z" + }, + "containers": { + "cna": { + "title": "HID Parser Library Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-190: Integer Overflow or Wraparound", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-190" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:52.053Z" + }, + "references": [ + { + "name": "HID Parser Library Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96982" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96983.json b/data/2026/96xxx/CVE-2026-96983.json new file mode 100644 index 0000000000..14e2631470 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96983.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96983", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.977Z", + "datePublished": "2026-11-10T18:17:56.099Z", + "dateUpdated": "2026-11-10T18:17:56.099Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Denial of Service Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:56.099Z" + }, + "references": [ + { + "name": "Windows DNS Denial of Service Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96983" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.3, + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96984.json b/data/2026/96xxx/CVE-2026-96984.json new file mode 100644 index 0000000000..ed0f364d20 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96984.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96984", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.978Z", + "datePublished": "2026-11-10T18:17:58.186Z", + "dateUpdated": "2026-11-10T18:17:58.186Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:58.186Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96984" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96985.json b/data/2026/96xxx/CVE-2026-96985.json new file mode 100644 index 0000000000..51f8479cd2 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96985.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96985", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.978Z", + "datePublished": "2026-11-10T18:17:58.630Z", + "dateUpdated": "2026-11-10T18:17:58.630Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:58.630Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96985" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96986.json b/data/2026/96xxx/CVE-2026-96986.json new file mode 100644 index 0000000000..58247cc2c6 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96986.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96986", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.978Z", + "datePublished": "2026-11-10T18:16:46.400Z", + "dateUpdated": "2026-11-10T18:16:46.400Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:46.400Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96986" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96987.json b/data/2026/96xxx/CVE-2026-96987.json new file mode 100644 index 0000000000..9ffeb328e9 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96987.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96987", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.978Z", + "datePublished": "2026-11-10T18:16:46.853Z", + "dateUpdated": "2026-11-10T18:16:46.853Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:46.853Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96987" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96988.json b/data/2026/96xxx/CVE-2026-96988.json new file mode 100644 index 0000000000..8d2d2359c8 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96988.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96988", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.978Z", + "datePublished": "2026-11-10T18:16:47.358Z", + "dateUpdated": "2026-11-10T18:16:47.358Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:47.358Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96988" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96989.json b/data/2026/96xxx/CVE-2026-96989.json new file mode 100644 index 0000000000..4714c14812 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96989.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96989", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:39:09.978Z", + "datePublished": "2026-11-10T18:17:52.581Z", + "dateUpdated": "2026-11-10T18:17:52.581Z" + }, + "containers": { + "cna": { + "title": "Secondary Logon Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:52.581Z" + }, + "references": [ + { + "name": "Secondary Logon Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96989" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 5.5, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96992.json b/data/2026/96xxx/CVE-2026-96992.json new file mode 100644 index 0000000000..7c767a4873 --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96992.json @@ -0,0 +1,322 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96992", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:52:28.737Z", + "datePublished": "2026-11-10T18:16:44.207Z", + "dateUpdated": "2026-11-10T18:16:44.207Z" + }, + "containers": { + "cna": { + "title": "Windows PCI Bus Driver Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:44.207Z" + }, + "references": [ + { + "name": "Windows PCI Bus Driver Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96992" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.4, + "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96993.json b/data/2026/96xxx/CVE-2026-96993.json new file mode 100644 index 0000000000..71ef8a3f2f --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96993.json @@ -0,0 +1,456 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96993", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:52:28.737Z", + "datePublished": "2026-11-10T18:16:42.447Z", + "dateUpdated": "2026-11-10T18:16:42.447Z" + }, + "containers": { + "cna": { + "title": "Windows Performance Monitor Remote Code Execution Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-763: Release of Invalid Pointer or Reference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-763" + }, + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:42.447Z" + }, + "references": [ + { + "name": "Windows Performance Monitor Remote Code Execution Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96993" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/96xxx/CVE-2026-96994.json b/data/2026/96xxx/CVE-2026-96994.json new file mode 100644 index 0000000000..640b9795db --- /dev/null +++ b/data/2026/96xxx/CVE-2026-96994.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-96994", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:52:28.737Z", + "datePublished": "2026-11-10T18:17:51.161Z", + "dateUpdated": "2026-11-10T18:17:51.161Z" + }, + "containers": { + "cna": { + "title": "Winsock Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Use after free in Winsock allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-416: Use After Free", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-416" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:51.161Z" + }, + "references": [ + { + "name": "Winsock Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96994" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/97xxx/CVE-2026-97000.json b/data/2026/97xxx/CVE-2026-97000.json new file mode 100644 index 0000000000..03cfd41a92 --- /dev/null +++ b/data/2026/97xxx/CVE-2026-97000.json @@ -0,0 +1,129 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-97000", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:52:28.738Z", + "datePublished": "2026-11-10T18:17:53.100Z", + "dateUpdated": "2026-11-10T18:17:53.100Z" + }, + "containers": { + "cna": { + "title": "Windows USM Communication Manager Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-476: NULL Pointer Dereference", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-476" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:53.100Z" + }, + "references": [ + { + "name": "Windows USM Communication Manager Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97000" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/97xxx/CVE-2026-97002.json b/data/2026/97xxx/CVE-2026-97002.json new file mode 100644 index 0000000000..da47f8b994 --- /dev/null +++ b/data/2026/97xxx/CVE-2026-97002.json @@ -0,0 +1,383 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-97002", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:52:28.738Z", + "datePublished": "2026-11-10T18:17:54.535Z", + "dateUpdated": "2026-11-10T18:17:54.535Z" + }, + "containers": { + "cna": { + "title": "Microsoft Windows VMSwitch Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:54.535Z" + }, + "references": [ + { + "name": "Microsoft Windows VMSwitch Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97002" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.5, + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/97xxx/CVE-2026-97006.json b/data/2026/97xxx/CVE-2026-97006.json new file mode 100644 index 0000000000..3cfa3a1eb4 --- /dev/null +++ b/data/2026/97xxx/CVE-2026-97006.json @@ -0,0 +1,230 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-97006", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:52:28.738Z", + "datePublished": "2026-11-10T18:17:57.728Z", + "dateUpdated": "2026-11-10T18:17:57.728Z" + }, + "containers": { + "cna": { + "title": "Windows DNS Information Disclosure Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-125: Out-of-bounds Read", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-125" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:17:57.728Z" + }, + "references": [ + { + "name": "Windows DNS Information Disclosure Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97006" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 4.9, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/97xxx/CVE-2026-97013.json b/data/2026/97xxx/CVE-2026-97013.json new file mode 100644 index 0000000000..ec9a5f0a05 --- /dev/null +++ b/data/2026/97xxx/CVE-2026-97013.json @@ -0,0 +1,450 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-97013", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:52:28.739Z", + "datePublished": "2026-11-10T18:16:41.916Z", + "dateUpdated": "2026-11-10T18:16:41.916Z" + }, + "containers": { + "cna": { + "title": "Windows Shell Elevation of Privilege Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9487" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5870" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7846" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33822" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3501" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9688" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9974" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7846", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3501", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9974", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9688", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9487", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5870", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33822", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-843" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:41.916Z" + }, + "references": [ + { + "name": "Windows Shell Elevation of Privilege Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97013" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "HIGH", + "baseScore": 7.8, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/97xxx/CVE-2026-97015.json b/data/2026/97xxx/CVE-2026-97015.json new file mode 100644 index 0000000000..a660c2f0b3 --- /dev/null +++ b/data/2026/97xxx/CVE-2026-97015.json @@ -0,0 +1,534 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-97015", + "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "state": "PUBLISHED", + "assignerShortName": "microsoft", + "dateReserved": "2026-09-23T20:52:28.739Z", + "datePublished": "2026-11-10T18:16:42.964Z", + "dateUpdated": "2026-11-10T18:16:42.964Z" + }, + "containers": { + "cna": { + "title": "Windows BitLocker Security Feature Bypass Vulnerability", + "datePublic": "2026-11-10T16:00:00.000Z", + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.2.9200.0", + "versionEndExcluding": "6.2.9200.26434" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "6.3.9600.0", + "versionEndExcluding": "6.3.9600.23470" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.14393.0", + "versionEndExcluding": "10.0.14393.9612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.17763.0", + "versionEndExcluding": "10.0.17763.9376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19044.0", + "versionEndExcluding": "10.0.19044.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*", + "versionStartIncluding": "10.0.19045.0", + "versionEndExcluding": "10.0.19045.7807" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.20348.0", + "versionEndExcluding": "10.0.20348.5761" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "10.0.22631.0", + "versionEndExcluding": "10.0.22631.7652" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.26200.0", + "versionEndExcluding": "10.0.26200.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26300.0", + "versionEndExcluding": "10.0.26300.9711" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.0.26100.0", + "versionEndExcluding": "10.0.26100.33650" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*", + "versionStartIncluding": "10.0.28000.0", + "versionEndExcluding": "10.0.28000.3231" + } + ] + } + ] + } + ], + "affected": [ + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1607", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 1809", + "platforms": [ + "32-bit Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 21H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19044.0", + "lessThan": "10.0.19044.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 10 Version 22H2", + "platforms": [ + "32-bit Systems", + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.19045.0", + "lessThan": "10.0.19045.7807", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 23H2", + "platforms": [ + "ARM64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 23H2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.22631.0", + "lessThan": "10.0.22631.7652", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 24H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 25H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26200.0", + "lessThan": "10.0.26200.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 version 26H1", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.28000.0", + "lessThan": "10.0.28000.3231", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows 11 Version 26H2", + "platforms": [ + "ARM64-based Systems", + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26300.0", + "lessThan": "10.0.26300.9711", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.2.9200.0", + "lessThan": "6.2.9200.26434", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2012 R2 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "6.3.9600.0", + "lessThan": "6.3.9600.23470", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2016 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.14393.0", + "lessThan": "10.0.14393.9612", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2019 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.17763.0", + "lessThan": "10.0.17763.9376", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2022", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.20348.0", + "lessThan": "10.0.20348.5761", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + }, + { + "vendor": "Microsoft", + "product": "Windows Server 2025 (Server Core installation)", + "platforms": [ + "x64-based Systems" + ], + "versions": [ + { + "version": "10.0.26100.0", + "lessThan": "10.0.26100.33650", + "versionType": "custom", + "status": "affected" + } + ] + } + ], + "descriptions": [ + { + "value": "Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.", + "lang": "en-US" + } + ], + "problemTypes": [ + { + "descriptions": [ + { + "description": "CWE-122: Heap-based Buffer Overflow", + "lang": "en-US", + "type": "CWE", + "cweId": "CWE-122" + } + ] + } + ], + "providerMetadata": { + "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", + "shortName": "microsoft", + "dateUpdated": "2026-11-10T18:16:42.964Z" + }, + "references": [ + { + "name": "Windows BitLocker Security Feature Bypass Vulnerability", + "tags": [ + "vendor-advisory", + "patch" + ], + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97015" + } + ], + "metrics": [ + { + "format": "CVSS", + "scenarios": [ + { + "lang": "en-US", + "value": "GENERAL" + } + ], + "cvssV3_1": { + "version": "3.1", + "baseSeverity": "MEDIUM", + "baseScore": 6.8, + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C" + } + } + ] + } + } +} \ No newline at end of file diff --git a/data/2026/98xxx/CVE-2026-98176.json b/data/2026/98xxx/CVE-2026-98176.json index e8f73402ea..cd562353b7 100644 --- a/data/2026/98xxx/CVE-2026-98176.json +++ b/data/2026/98xxx/CVE-2026-98176.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.322Z", "datePublished": "2026-10-06T08:44:20.004Z", - "dateUpdated": "2026-11-06T17:14:59.026Z" + "dateUpdated": "2026-11-10T18:15:10.994Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:14:59.026Z" + "dateUpdated": "2026-11-10T18:15:10.994Z" }, "descriptions": [ { @@ -36,6 +36,12 @@ "drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c" ], "versions": [ + { + "version": "14328aa58ce523a59996c5a82681c43ec048cc33", + "lessThan": "1ab281c7ce2dc5195d337f2c16e22eba356b47f9", + "status": "affected", + "versionType": "git" + }, { "version": "14328aa58ce523a59996c5a82681c43ec048cc33", "lessThan": "9e8f43579f849fba0dd1059160f50bd44a767366", @@ -78,6 +84,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -106,6 +118,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -130,6 +148,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/1ab281c7ce2dc5195d337f2c16e22eba356b47f9" + }, { "url": "https://git.kernel.org/stable/c/9e8f43579f849fba0dd1059160f50bd44a767366" }, diff --git a/data/2026/98xxx/CVE-2026-98177.json b/data/2026/98xxx/CVE-2026-98177.json index fa25b7607a..5220ab71fb 100644 --- a/data/2026/98xxx/CVE-2026-98177.json +++ b/data/2026/98xxx/CVE-2026-98177.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.322Z", "datePublished": "2026-10-06T08:44:20.807Z", - "dateUpdated": "2026-11-06T17:14:59.399Z" + "dateUpdated": "2026-11-10T18:15:11.582Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:14:59.399Z" + "dateUpdated": "2026-11-10T18:15:11.582Z" }, "descriptions": [ { @@ -34,6 +34,12 @@ "drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c" ], "versions": [ + { + "version": "d696d536f0a97ac779d6176107ac4e96d0a2f8b9", + "lessThan": "85f2d80a260f2ee90647da094b80a2d5ce719750", + "status": "affected", + "versionType": "git" + }, { "version": "d696d536f0a97ac779d6176107ac4e96d0a2f8b9", "lessThan": "3c97f7cb6c48826663648b6081b614c2befc8ac7", @@ -74,6 +80,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -102,6 +114,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.3", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -126,6 +144,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/85f2d80a260f2ee90647da094b80a2d5ce719750" + }, { "url": "https://git.kernel.org/stable/c/3c97f7cb6c48826663648b6081b614c2befc8ac7" }, diff --git a/data/2026/98xxx/CVE-2026-98180.json b/data/2026/98xxx/CVE-2026-98180.json index 5a95f900a2..9ea027e45b 100644 --- a/data/2026/98xxx/CVE-2026-98180.json +++ b/data/2026/98xxx/CVE-2026-98180.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.322Z", "datePublished": "2026-10-06T08:44:23.327Z", - "dateUpdated": "2026-10-19T09:15:11.540Z" + "dateUpdated": "2026-11-10T18:15:11.955Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T09:15:11.540Z" + "dateUpdated": "2026-11-10T18:15:11.955Z" }, "descriptions": [ { @@ -52,6 +52,12 @@ "drivers/gpu/drm/msm/msm_ringbuffer.h" ], "versions": [ + { + "version": "1d8a5ca436ee4a28eec14cb813f790f7cdeeee19", + "lessThan": "0ba7c696eea3af41ac4712197566a7b94eedc637", + "status": "affected", + "versionType": "git" + }, { "version": "1d8a5ca436ee4a28eec14cb813f790f7cdeeee19", "lessThan": "d81bf4581903b0cba0698cd4d1c07fc6be21754a", @@ -94,6 +100,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.54", "lessThanOrEqual": "6.18.*", @@ -122,6 +134,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -146,6 +164,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/0ba7c696eea3af41ac4712197566a7b94eedc637" + }, { "url": "https://git.kernel.org/stable/c/d81bf4581903b0cba0698cd4d1c07fc6be21754a" }, diff --git a/data/2026/98xxx/CVE-2026-98228.json b/data/2026/98xxx/CVE-2026-98228.json index 59cf4a023f..be74f5b8fc 100644 --- a/data/2026/98xxx/CVE-2026-98228.json +++ b/data/2026/98xxx/CVE-2026-98228.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.328Z", "datePublished": "2026-10-06T08:45:03.154Z", - "dateUpdated": "2026-11-06T17:14:59.831Z" + "dateUpdated": "2026-11-10T18:15:12.508Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:14:59.831Z" + "dateUpdated": "2026-11-10T18:15:12.508Z" }, "descriptions": [ { @@ -49,6 +49,12 @@ "arch/mips/Kconfig" ], "versions": [ + { + "version": "fbe0fae601b780622fcb7034a479fa161645b9f4", + "lessThan": "8a9a8dfab8f6fb3b85859fb021e4275fadd59ad1", + "status": "affected", + "versionType": "git" + }, { "version": "fbe0fae601b780622fcb7034a479fa161645b9f4", "lessThan": "5802a9fda4cede6af31a3e3b171480c0e446703c", @@ -88,6 +94,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -116,6 +128,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -140,6 +158,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/8a9a8dfab8f6fb3b85859fb021e4275fadd59ad1" + }, { "url": "https://git.kernel.org/stable/c/5802a9fda4cede6af31a3e3b171480c0e446703c" }, diff --git a/data/2026/98xxx/CVE-2026-98408.json b/data/2026/98xxx/CVE-2026-98408.json index 0e7f7ad95c..391ce1250b 100644 --- a/data/2026/98xxx/CVE-2026-98408.json +++ b/data/2026/98xxx/CVE-2026-98408.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.347Z", "datePublished": "2026-10-14T13:27:42.390Z", - "dateUpdated": "2026-10-19T09:19:01.406Z" + "dateUpdated": "2026-11-10T18:15:13.267Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T09:19:01.406Z" + "dateUpdated": "2026-11-10T18:15:13.267Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "drivers/watchdog/rzv2h_wdt.c" ], "versions": [ + { + "version": "f6febd0a30b6e299a08076116256e3b36c24eada", + "lessThan": "96ad5311ff75d374430ec82a1843bcb193145c93", + "status": "affected", + "versionType": "git" + }, { "version": "f6febd0a30b6e299a08076116256e3b36c24eada", "lessThan": "eb14ee406e1d0fbbfb857f0eaa710daa8c2dc30e", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.54", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/96ad5311ff75d374430ec82a1843bcb193145c93" + }, { "url": "https://git.kernel.org/stable/c/eb14ee406e1d0fbbfb857f0eaa710daa8c2dc30e" }, diff --git a/data/2026/98xxx/CVE-2026-98439.json b/data/2026/98xxx/CVE-2026-98439.json index 7bb7066636..4e3124bd6e 100644 --- a/data/2026/98xxx/CVE-2026-98439.json +++ b/data/2026/98xxx/CVE-2026-98439.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.349Z", "datePublished": "2026-10-18T14:45:28.290Z", - "dateUpdated": "2026-11-06T17:15:00.178Z" + "dateUpdated": "2026-11-10T18:15:13.580Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:00.178Z" + "dateUpdated": "2026-11-10T18:15:13.580Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/smb/server/connection.c" ], "versions": [ + { + "version": "0626e6641f6b467447c81dd7678a69c66f7746cf", + "lessThan": "2a6ad0d06934628f10fb53513921efbb42e44745", + "status": "affected", + "versionType": "git" + }, { "version": "0626e6641f6b467447c81dd7678a69c66f7746cf", "lessThan": "bbcfc51648fbf32f8c899163b0851fa812628080", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/2a6ad0d06934628f10fb53513921efbb42e44745" + }, { "url": "https://git.kernel.org/stable/c/bbcfc51648fbf32f8c899163b0851fa812628080" }, diff --git a/data/2026/98xxx/CVE-2026-98449.json b/data/2026/98xxx/CVE-2026-98449.json index c76ada0701..365765237b 100644 --- a/data/2026/98xxx/CVE-2026-98449.json +++ b/data/2026/98xxx/CVE-2026-98449.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.349Z", "datePublished": "2026-10-18T15:14:59.772Z", - "dateUpdated": "2026-11-06T17:15:00.989Z" + "dateUpdated": "2026-11-10T18:15:14.034Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:00.989Z" + "dateUpdated": "2026-11-10T18:15:14.034Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/smb/client/transport.c" ], "versions": [ + { + "version": "ee258d79159afed52ca9372aeb9c1a51e89b32ee", + "lessThan": "36a2ba21d38a86bae84441e4c8d5b10653ef341a", + "status": "affected", + "versionType": "git" + }, { "version": "ee258d79159afed52ca9372aeb9c1a51e89b32ee", "lessThan": "59d30bdc3dd6fd3a8990f59bc7a137b1cbb3ed4e", @@ -83,6 +89,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -111,6 +123,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -140,6 +158,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/36a2ba21d38a86bae84441e4c8d5b10653ef341a" + }, { "url": "https://git.kernel.org/stable/c/59d30bdc3dd6fd3a8990f59bc7a137b1cbb3ed4e" }, diff --git a/data/2026/98xxx/CVE-2026-98466.json b/data/2026/98xxx/CVE-2026-98466.json index 34b353c180..3a103bfded 100644 --- a/data/2026/98xxx/CVE-2026-98466.json +++ b/data/2026/98xxx/CVE-2026-98466.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.351Z", "datePublished": "2026-10-18T15:15:18.414Z", - "dateUpdated": "2026-10-24T14:08:58.562Z" + "dateUpdated": "2026-11-10T18:15:14.388Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-24T14:08:58.562Z" + "dateUpdated": "2026-11-10T18:15:14.388Z" }, "descriptions": [ { @@ -49,6 +49,12 @@ "arch/arm64/kvm/hyp/nvhe/setup.c" ], "versions": [ + { + "version": "1a919b17ef012ca0572bae759c27e5ea02bfb47f", + "lessThan": "6c7b5eb6f7f424f5b82d0f9469a5f5adcdf4d973", + "status": "affected", + "versionType": "git" + }, { "version": "1a919b17ef012ca0572bae759c27e5ea02bfb47f", "lessThan": "e5dd2a91a7ae3a276e6d79806127e923936e241b", @@ -88,6 +94,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.55", "lessThanOrEqual": "6.18.*", @@ -116,6 +128,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -140,6 +158,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/6c7b5eb6f7f424f5b82d0f9469a5f5adcdf4d973" + }, { "url": "https://git.kernel.org/stable/c/e5dd2a91a7ae3a276e6d79806127e923936e241b" }, diff --git a/data/2026/98xxx/CVE-2026-98674.json b/data/2026/98xxx/CVE-2026-98674.json index ace0b51981..4d05184d48 100644 --- a/data/2026/98xxx/CVE-2026-98674.json +++ b/data/2026/98xxx/CVE-2026-98674.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.363Z", "datePublished": "2026-10-18T15:45:28.739Z", - "dateUpdated": "2026-10-19T09:23:43.939Z" + "dateUpdated": "2026-11-10T18:15:14.796Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T09:23:43.939Z" + "dateUpdated": "2026-11-10T18:15:14.796Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "drivers/iio/adc/adi-axi-adc.c" ], "versions": [ + { + "version": "7ecb8ee5c93be9f00cbf090f7f53b2a32d995184", + "lessThan": "e5e28b0cd56249d1a45155ee6b656c1bbd8a2b3e", + "status": "affected", + "versionType": "git" + }, { "version": "7ecb8ee5c93be9f00cbf090f7f53b2a32d995184", "lessThan": "b473ee29aa0d39e7a7568b9675b15db2b0ae6057", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.56", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.10", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/e5e28b0cd56249d1a45155ee6b656c1bbd8a2b3e" + }, { "url": "https://git.kernel.org/stable/c/b473ee29aa0d39e7a7568b9675b15db2b0ae6057" }, diff --git a/data/2026/98xxx/CVE-2026-98682.json b/data/2026/98xxx/CVE-2026-98682.json index 112eda3794..20e29b0fe2 100644 --- a/data/2026/98xxx/CVE-2026-98682.json +++ b/data/2026/98xxx/CVE-2026-98682.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.364Z", "datePublished": "2026-10-18T15:45:47.375Z", - "dateUpdated": "2026-11-06T17:15:01.310Z" + "dateUpdated": "2026-11-10T18:15:15.197Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:01.310Z" + "dateUpdated": "2026-11-10T18:15:15.197Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/smb/client/cifsfs.c" ], "versions": [ + { + "version": "c54fc3a4f375663f2361a9cbb2955fb4ef912879", + "lessThan": "6e7a06704457594f06e4ea58a17a5d162ccc735c", + "status": "affected", + "versionType": "git" + }, { "version": "c54fc3a4f375663f2361a9cbb2955fb4ef912879", "lessThan": "e97dac26ed2cce04f9d159cc99e1eca828c5d49e", @@ -94,6 +100,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -122,6 +134,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -156,6 +174,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/6e7a06704457594f06e4ea58a17a5d162ccc735c" + }, { "url": "https://git.kernel.org/stable/c/e97dac26ed2cce04f9d159cc99e1eca828c5d49e" }, diff --git a/data/2026/98xxx/CVE-2026-98683.json b/data/2026/98xxx/CVE-2026-98683.json index 66c5af6383..76ae39f2c5 100644 --- a/data/2026/98xxx/CVE-2026-98683.json +++ b/data/2026/98xxx/CVE-2026-98683.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.364Z", "datePublished": "2026-10-18T15:45:50.014Z", - "dateUpdated": "2026-10-19T09:23:53.516Z" + "dateUpdated": "2026-11-10T18:15:16.478Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T09:23:53.516Z" + "dateUpdated": "2026-11-10T18:15:16.478Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/smb/client/smb2ops.c" ], "versions": [ + { + "version": "91d1dfae464987aaf6c79ff51d8674880fb3be77", + "lessThan": "1506390a788c45af11008adc91a38dfb5beaf03c", + "status": "affected", + "versionType": "git" + }, { "version": "91d1dfae464987aaf6c79ff51d8674880fb3be77", "lessThan": "cecf4114069fc19629d284710fd783d56bbca862", @@ -105,6 +111,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.56", "lessThanOrEqual": "6.18.*", @@ -133,6 +145,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -172,6 +190,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/1506390a788c45af11008adc91a38dfb5beaf03c" + }, { "url": "https://git.kernel.org/stable/c/cecf4114069fc19629d284710fd783d56bbca862" }, diff --git a/data/2026/98xxx/CVE-2026-98684.json b/data/2026/98xxx/CVE-2026-98684.json index bda2aec958..00597b7f78 100644 --- a/data/2026/98xxx/CVE-2026-98684.json +++ b/data/2026/98xxx/CVE-2026-98684.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.364Z", "datePublished": "2026-10-18T15:45:52.828Z", - "dateUpdated": "2026-10-19T09:23:54.479Z" + "dateUpdated": "2026-11-10T18:15:17.155Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T09:23:54.479Z" + "dateUpdated": "2026-11-10T18:15:17.155Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/smb/client/smb2ops.c" ], "versions": [ + { + "version": "966a3cb7c7db786452a87afdc3b48858fc4d4d6b", + "lessThan": "6787575545cd8af1da3778d7c1ae43a4398a6b26", + "status": "affected", + "versionType": "git" + }, { "version": "966a3cb7c7db786452a87afdc3b48858fc4d4d6b", "lessThan": "f82242fe3109a3ef72f429540b5bdde08fbfb0e4", @@ -105,6 +111,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.56", "lessThanOrEqual": "6.18.*", @@ -133,6 +145,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.14", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -172,6 +190,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/6787575545cd8af1da3778d7c1ae43a4398a6b26" + }, { "url": "https://git.kernel.org/stable/c/f82242fe3109a3ef72f429540b5bdde08fbfb0e4" }, diff --git a/data/2026/98xxx/CVE-2026-98685.json b/data/2026/98xxx/CVE-2026-98685.json index e59897ff8f..93704fcfd7 100644 --- a/data/2026/98xxx/CVE-2026-98685.json +++ b/data/2026/98xxx/CVE-2026-98685.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.364Z", "datePublished": "2026-10-18T15:45:53.821Z", - "dateUpdated": "2026-11-06T17:15:03.375Z" + "dateUpdated": "2026-11-10T18:15:17.687Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:03.375Z" + "dateUpdated": "2026-11-10T18:15:17.687Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/smb/client/cifsfs.c" ], "versions": [ + { + "version": "c54fc3a4f375663f2361a9cbb2955fb4ef912879", + "lessThan": "eba974d6c850e77db87f6f9ae343164227dffefc", + "status": "affected", + "versionType": "git" + }, { "version": "c54fc3a4f375663f2361a9cbb2955fb4ef912879", "lessThan": "7beb2f2a58023b2ff28fd52bdb72bed74257ee04", @@ -94,6 +100,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -122,6 +134,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -156,6 +174,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/eba974d6c850e77db87f6f9ae343164227dffefc" + }, { "url": "https://git.kernel.org/stable/c/7beb2f2a58023b2ff28fd52bdb72bed74257ee04" }, diff --git a/data/2026/98xxx/CVE-2026-98714.json b/data/2026/98xxx/CVE-2026-98714.json index f40b2f19e2..986780674f 100644 --- a/data/2026/98xxx/CVE-2026-98714.json +++ b/data/2026/98xxx/CVE-2026-98714.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.366Z", "datePublished": "2026-10-18T15:46:47.176Z", - "dateUpdated": "2026-11-06T17:15:04.572Z" + "dateUpdated": "2026-11-10T18:15:18.111Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:04.572Z" + "dateUpdated": "2026-11-10T18:15:18.111Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "arch/x86/kvm/svm/svm.c" ], "versions": [ + { + "version": "8d28fec406e4d5ce6c109fe12699976e72e9748e", + "lessThan": "2e9b8c79ae6c1dcf650ea288cf8fc69ee5241dd9", + "status": "affected", + "versionType": "git" + }, { "version": "8d28fec406e4d5ce6c109fe12699976e72e9748e", "lessThan": "5d06e2f861d61a03481348378fdf9cc3e68bff47", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.38", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/2e9b8c79ae6c1dcf650ea288cf8fc69ee5241dd9" + }, { "url": "https://git.kernel.org/stable/c/5d06e2f861d61a03481348378fdf9cc3e68bff47" }, diff --git a/data/2026/98xxx/CVE-2026-98715.json b/data/2026/98xxx/CVE-2026-98715.json index 2aba4cf1f3..f15c760884 100644 --- a/data/2026/98xxx/CVE-2026-98715.json +++ b/data/2026/98xxx/CVE-2026-98715.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.366Z", "datePublished": "2026-10-18T15:46:47.988Z", - "dateUpdated": "2026-11-06T17:15:05.144Z" + "dateUpdated": "2026-11-10T18:15:18.805Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:05.144Z" + "dateUpdated": "2026-11-10T18:15:18.805Z" }, "descriptions": [ { @@ -34,6 +34,12 @@ "arch/x86/kvm/svm/svm.h" ], "versions": [ + { + "version": "38e5e92fe8c02a8766459d505423b855caf9af1f", + "lessThan": "bfe48e689ba011d3d6cf8adcca03072aa0430133", + "status": "affected", + "versionType": "git" + }, { "version": "38e5e92fe8c02a8766459d505423b855caf9af1f", "lessThan": "f2bd7cf6a83e49c710e2b93d3064fa0ebb7e0006", @@ -74,6 +80,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -102,6 +114,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.38", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -126,6 +144,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/bfe48e689ba011d3d6cf8adcca03072aa0430133" + }, { "url": "https://git.kernel.org/stable/c/f2bd7cf6a83e49c710e2b93d3064fa0ebb7e0006" }, diff --git a/data/2026/98xxx/CVE-2026-98786.json b/data/2026/98xxx/CVE-2026-98786.json index 3b5fa4686e..4a4cc12b43 100644 --- a/data/2026/98xxx/CVE-2026-98786.json +++ b/data/2026/98xxx/CVE-2026-98786.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.370Z", "datePublished": "2026-10-18T15:48:22.989Z", - "dateUpdated": "2026-11-06T17:15:05.665Z" + "dateUpdated": "2026-11-10T18:15:19.556Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:05.665Z" + "dateUpdated": "2026-11-10T18:15:19.556Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_mst_types.c" ], "versions": [ + { + "version": "f04d275d94e164d24516c32437c988a323018f63", + "lessThan": "0189f725242087679bc9f1bbf77ad086f56a72c8", + "status": "affected", + "versionType": "git" + }, { "version": "f04d275d94e164d24516c32437c988a323018f63", "lessThan": "5684a6c24c0d7c40ef2c4ccb3e4a64cffe76a791", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/0189f725242087679bc9f1bbf77ad086f56a72c8" + }, { "url": "https://git.kernel.org/stable/c/5684a6c24c0d7c40ef2c4ccb3e4a64cffe76a791" }, diff --git a/data/2026/98xxx/CVE-2026-98853.json b/data/2026/98xxx/CVE-2026-98853.json index 386bfb6360..52c6d50c9d 100644 --- a/data/2026/98xxx/CVE-2026-98853.json +++ b/data/2026/98xxx/CVE-2026-98853.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.376Z", "datePublished": "2026-10-18T15:51:02.683Z", - "dateUpdated": "2026-10-30T12:40:14.136Z" + "dateUpdated": "2026-11-10T18:15:20.032Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-30T12:40:14.136Z" + "dateUpdated": "2026-11-10T18:15:20.032Z" }, "descriptions": [ { @@ -36,6 +36,12 @@ "net/ipv6/ip6_offload.c" ], "versions": [ + { + "version": "3347c960295583eee3fd58e5c539fb1972fbc005", + "lessThan": "cadffc83ee1a560d5cd18e6d607c1d76f6fd4bd4", + "status": "affected", + "versionType": "git" + }, { "version": "3347c960295583eee3fd58e5c539fb1972fbc005", "lessThan": "388604279da3d0698a151efa4fb6d852efa0de4a", @@ -78,6 +84,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.60", "lessThanOrEqual": "6.18.*", @@ -106,6 +118,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.13", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -130,6 +148,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/cadffc83ee1a560d5cd18e6d607c1d76f6fd4bd4" + }, { "url": "https://git.kernel.org/stable/c/388604279da3d0698a151efa4fb6d852efa0de4a" }, diff --git a/data/2026/98xxx/CVE-2026-98863.json b/data/2026/98xxx/CVE-2026-98863.json index 66295a00a4..c7d3b77e64 100644 --- a/data/2026/98xxx/CVE-2026-98863.json +++ b/data/2026/98xxx/CVE-2026-98863.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.376Z", "datePublished": "2026-10-18T15:51:24.446Z", - "dateUpdated": "2026-10-19T09:26:57.709Z" + "dateUpdated": "2026-11-10T18:15:20.513Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-19T09:26:57.709Z" + "dateUpdated": "2026-11-10T18:15:20.513Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "arch/x86/kvm/x86.c" ], "versions": [ + { + "version": "671ddc700fd08b94967b1e2a937020e30c838609", + "lessThan": "1e231eedb0c5aafdc8d96a816ec75554aa69004d", + "status": "affected", + "versionType": "git" + }, { "version": "671ddc700fd08b94967b1e2a937020e30c838609", "lessThan": "525694a6021ec6c8f7ce1f38acdf2dd77698fec1", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.56", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/1e231eedb0c5aafdc8d96a816ec75554aa69004d" + }, { "url": "https://git.kernel.org/stable/c/525694a6021ec6c8f7ce1f38acdf2dd77698fec1" }, diff --git a/data/2026/98xxx/CVE-2026-98920.json b/data/2026/98xxx/CVE-2026-98920.json index d2629ad11a..355f5ca6cc 100644 --- a/data/2026/98xxx/CVE-2026-98920.json +++ b/data/2026/98xxx/CVE-2026-98920.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.380Z", "datePublished": "2026-10-23T12:02:06.560Z", - "dateUpdated": "2026-10-23T12:05:25.919Z" + "dateUpdated": "2026-11-10T18:15:20.857Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-23T12:05:25.919Z" + "dateUpdated": "2026-11-10T18:15:20.857Z" }, "descriptions": [ { @@ -35,6 +35,12 @@ "include/linux/mempool.h" ], "versions": [ + { + "version": "b343252d6f536203dd0660f676190dcbf6d2ecdc", + "lessThan": "6ba3d758cd40888908f96d68d69322dad65a871e", + "status": "affected", + "versionType": "git" + }, { "version": "15ed8a9b7c63e9171f5139a6aaa1ffb61809861f", "lessThan": "5c03da745171485fd181f17b69213464f6d05f3d", @@ -53,11 +59,6 @@ "status": "affected", "versionType": "git" }, - { - "version": "b343252d6f536203dd0660f676190dcbf6d2ecdc", - "status": "affected", - "versionType": "git" - }, { "version": "3f6d7f8a5416d852648d15a05e895f1195ee8a85", "status": "affected", @@ -65,7 +66,7 @@ }, { "version": "6.12.114", - "lessThan": "6.13", + "lessThan": "6.12.117", "status": "affected", "versionType": "semver" }, @@ -98,6 +99,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "7.2.9", "lessThanOrEqual": "7.2.*", @@ -120,6 +127,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.114", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -132,11 +145,6 @@ "versionStartIncluding": "7.2", "versionEndExcluding": "7.3" }, - { - "vulnerable": true, - "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "6.12.114" - }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -148,6 +156,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/6ba3d758cd40888908f96d68d69322dad65a871e" + }, { "url": "https://git.kernel.org/stable/c/5c03da745171485fd181f17b69213464f6d05f3d" }, diff --git a/data/2026/98xxx/CVE-2026-98978.json b/data/2026/98xxx/CVE-2026-98978.json index 8f917d4c38..f22cf57467 100644 --- a/data/2026/98xxx/CVE-2026-98978.json +++ b/data/2026/98xxx/CVE-2026-98978.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.383Z", "datePublished": "2026-10-23T12:19:51.428Z", - "dateUpdated": "2026-10-24T14:09:47.444Z" + "dateUpdated": "2026-11-10T18:15:21.525Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-24T14:09:47.444Z" + "dateUpdated": "2026-11-10T18:15:21.525Z" }, "descriptions": [ { @@ -49,6 +49,12 @@ "fs/namespace.c" ], "versions": [ + { + "version": "5ff9d8a65ce80efb509ce4e8051394e9ed2cd942", + "lessThan": "6c8013ea84fcc51cf26aa870b61b5388c7196ed5", + "status": "affected", + "versionType": "git" + }, { "version": "5ff9d8a65ce80efb509ce4e8051394e9ed2cd942", "lessThan": "6b8dc3713a76346d212abab46cbfc8d7070f534c", @@ -88,6 +94,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.57", "lessThanOrEqual": "6.18.*", @@ -116,6 +128,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.12", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -140,6 +158,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/6c8013ea84fcc51cf26aa870b61b5388c7196ed5" + }, { "url": "https://git.kernel.org/stable/c/6b8dc3713a76346d212abab46cbfc8d7070f534c" }, diff --git a/data/2026/98xxx/CVE-2026-98989.json b/data/2026/98xxx/CVE-2026-98989.json index 9f0fbd11d6..f94db19efb 100644 --- a/data/2026/98xxx/CVE-2026-98989.json +++ b/data/2026/98xxx/CVE-2026-98989.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.384Z", "datePublished": "2026-10-23T12:20:08.366Z", - "dateUpdated": "2026-10-23T12:20:08.366Z" + "dateUpdated": "2026-11-10T18:15:21.865Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-23T12:20:08.366Z" + "dateUpdated": "2026-11-10T18:15:21.865Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/namespace.c" ], "versions": [ + { + "version": "e149ed2b805fefdccf7ccdfc19eca22fdd4514ac", + "lessThan": "b82f3c1131456537a514595c3991b62652507c9d", + "status": "affected", + "versionType": "git" + }, { "version": "e149ed2b805fefdccf7ccdfc19eca22fdd4514ac", "lessThan": "a0ba48256f5dff6f75a45f8ce39fe57f21df1022", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.57", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.19", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/b82f3c1131456537a514595c3991b62652507c9d" + }, { "url": "https://git.kernel.org/stable/c/a0ba48256f5dff6f75a45f8ce39fe57f21df1022" }, diff --git a/data/2026/98xxx/CVE-2026-98996.json b/data/2026/98xxx/CVE-2026-98996.json index 55b8b50518..94d86b05d4 100644 --- a/data/2026/98xxx/CVE-2026-98996.json +++ b/data/2026/98xxx/CVE-2026-98996.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.384Z", "datePublished": "2026-10-23T12:20:15.188Z", - "dateUpdated": "2026-10-23T12:20:15.188Z" + "dateUpdated": "2026-11-10T18:15:22.209Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-23T12:20:15.188Z" + "dateUpdated": "2026-11-10T18:15:22.209Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/pnode.c" ], "versions": [ + { + "version": "99b19d16471e9c3faa85cad38abc9cbbe04c6d55", + "lessThan": "97c9ca40b67eafbe61a253e28cd51dddb7c6bec4", + "status": "affected", + "versionType": "git" + }, { "version": "99b19d16471e9c3faa85cad38abc9cbbe04c6d55", "lessThan": "bf2c8dec26fb792876b5e9bde7030c45d8be3908", @@ -127,6 +133,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.57", "lessThanOrEqual": "6.18.*", @@ -155,6 +167,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.13", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -204,6 +222,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/97c9ca40b67eafbe61a253e28cd51dddb7c6bec4" + }, { "url": "https://git.kernel.org/stable/c/bf2c8dec26fb792876b5e9bde7030c45d8be3908" }, diff --git a/data/2026/99xxx/CVE-2026-99021.json b/data/2026/99xxx/CVE-2026-99021.json index 930a14bb2f..926a3eb451 100644 --- a/data/2026/99xxx/CVE-2026-99021.json +++ b/data/2026/99xxx/CVE-2026-99021.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.386Z", "datePublished": "2026-10-23T12:21:00.951Z", - "dateUpdated": "2026-10-23T12:21:00.951Z" + "dateUpdated": "2026-11-10T18:15:22.599Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-23T12:21:00.951Z" + "dateUpdated": "2026-11-10T18:15:22.599Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "drivers/regulator/of_regulator.c" ], "versions": [ + { + "version": "27b9ecc7a9ba1d0014779bfe5a6dbf630899c6e7", + "lessThan": "a5f43540e14589b53f80306d25c043c0abdcbca0", + "status": "affected", + "versionType": "git" + }, { "version": "27b9ecc7a9ba1d0014779bfe5a6dbf630899c6e7", "lessThan": "82ac8c4939bdbd064b4f54a580fbe4baf0d60e41", @@ -83,6 +89,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.57", "lessThanOrEqual": "6.18.*", @@ -111,6 +123,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -140,6 +158,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/a5f43540e14589b53f80306d25c043c0abdcbca0" + }, { "url": "https://git.kernel.org/stable/c/82ac8c4939bdbd064b4f54a580fbe4baf0d60e41" }, diff --git a/data/2026/99xxx/CVE-2026-99026.json b/data/2026/99xxx/CVE-2026-99026.json index 591582ae80..a390c18fa2 100644 --- a/data/2026/99xxx/CVE-2026-99026.json +++ b/data/2026/99xxx/CVE-2026-99026.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.386Z", "datePublished": "2026-10-23T12:21:13.509Z", - "dateUpdated": "2026-10-23T12:21:13.509Z" + "dateUpdated": "2026-11-10T18:15:22.929Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-23T12:21:13.509Z" + "dateUpdated": "2026-11-10T18:15:22.929Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "drivers/net/team/team_mode_broadcast.c" ], "versions": [ + { + "version": "5fc889911a99043a97da1daa0d010ad72cbc3042", + "lessThan": "aec1d35d76ad883bae83c24707010115f38d02ac", + "status": "affected", + "versionType": "git" + }, { "version": "5fc889911a99043a97da1daa0d010ad72cbc3042", "lessThan": "961563117626f4681623077ec0cfd86f86da0d49", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.57", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.6", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/aec1d35d76ad883bae83c24707010115f38d02ac" + }, { "url": "https://git.kernel.org/stable/c/961563117626f4681623077ec0cfd86f86da0d49" }, diff --git a/data/2026/99xxx/CVE-2026-99076.json b/data/2026/99xxx/CVE-2026-99076.json index c2dfad2708..cbe68e4409 100644 --- a/data/2026/99xxx/CVE-2026-99076.json +++ b/data/2026/99xxx/CVE-2026-99076.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.389Z", "datePublished": "2026-10-23T12:23:19.727Z", - "dateUpdated": "2026-11-06T17:15:06.320Z" + "dateUpdated": "2026-11-10T18:15:23.412Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:06.320Z" + "dateUpdated": "2026-11-10T18:15:23.412Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "net/ipv6/udp.c" ], "versions": [ + { + "version": "2b760fcf5cfb34e8610df56d83745b2b74ae1379", + "lessThan": "9b88f0fcbd4b746de0478b4fd99fa495eb26b857", + "status": "affected", + "versionType": "git" + }, { "version": "2b760fcf5cfb34e8610df56d83745b2b74ae1379", "lessThan": "fc1fc874ceed4db566a5efbff39313d3d91d424a", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/9b88f0fcbd4b746de0478b4fd99fa495eb26b857" + }, { "url": "https://git.kernel.org/stable/c/fc1fc874ceed4db566a5efbff39313d3d91d424a" }, diff --git a/data/2026/99xxx/CVE-2026-99086.json b/data/2026/99xxx/CVE-2026-99086.json index a8c4def882..1095af7a8f 100644 --- a/data/2026/99xxx/CVE-2026-99086.json +++ b/data/2026/99xxx/CVE-2026-99086.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.390Z", "datePublished": "2026-10-23T12:45:04.496Z", - "dateUpdated": "2026-10-23T12:45:04.496Z" + "dateUpdated": "2026-11-10T18:15:23.819Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-23T12:45:04.496Z" + "dateUpdated": "2026-11-10T18:15:23.819Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "drivers/md/dm-integrity.c" ], "versions": [ + { + "version": "c6138af1f5454c2631a837916fda958ea72c0d71", + "lessThan": "0499b6d1c9d4477d6538b88c30f9d0c1a28b3e75", + "status": "affected", + "versionType": "git" + }, { "version": "38625191f32f77a9d5fc7cc15f4f9b78768bfb33", "lessThan": "454b67fcc28c18502e47dfb9f067b04c28628ada", @@ -62,14 +68,15 @@ "versionType": "git" }, { - "version": "c6138af1f5454c2631a837916fda958ea72c0d71", + "version": "3ff70e2e31c419e2230d0c66cb2bfb3b1b414b7f", "status": "affected", "versionType": "git" }, { - "version": "3ff70e2e31c419e2230d0c66cb2bfb3b1b414b7f", + "version": "6.12.75", + "lessThan": "6.12.117", "status": "affected", - "versionType": "git" + "versionType": "semver" }, { "version": "6.18.16", @@ -89,12 +96,6 @@ "status": "affected", "versionType": "semver" }, - { - "version": "6.12.75", - "lessThan": "6.13", - "status": "affected", - "versionType": "semver" - }, { "version": "6.19.6", "lessThan": "6.20", @@ -122,6 +123,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.58", "lessThanOrEqual": "6.18.*", @@ -150,6 +157,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.75", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -178,11 +191,6 @@ "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.128" }, - { - "vulnerable": true, - "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", - "versionStartIncluding": "6.12.75" - }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -194,6 +202,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/0499b6d1c9d4477d6538b88c30f9d0c1a28b3e75" + }, { "url": "https://git.kernel.org/stable/c/454b67fcc28c18502e47dfb9f067b04c28628ada" }, diff --git a/data/2026/99xxx/CVE-2026-99087.json b/data/2026/99xxx/CVE-2026-99087.json index 92030332f3..f48327577b 100644 --- a/data/2026/99xxx/CVE-2026-99087.json +++ b/data/2026/99xxx/CVE-2026-99087.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.390Z", "datePublished": "2026-10-23T12:45:05.714Z", - "dateUpdated": "2026-10-23T12:45:05.714Z" + "dateUpdated": "2026-11-10T18:15:24.425Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-23T12:45:05.714Z" + "dateUpdated": "2026-11-10T18:15:24.425Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "drivers/md/dm-integrity.c" ], "versions": [ + { + "version": "468dfca38b1a6fbdccd195d875599cb7c8875cd9", + "lessThan": "73e5b7b14df0430ef2135e9bd9fa3f5b253ef789", + "status": "affected", + "versionType": "git" + }, { "version": "468dfca38b1a6fbdccd195d875599cb7c8875cd9", "lessThan": "2e25842f0e4423e0efb243f56153d842ed6b933f", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.58", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/73e5b7b14df0430ef2135e9bd9fa3f5b253ef789" + }, { "url": "https://git.kernel.org/stable/c/2e25842f0e4423e0efb243f56153d842ed6b933f" }, diff --git a/data/2026/99xxx/CVE-2026-99109.json b/data/2026/99xxx/CVE-2026-99109.json index b5fa388735..ef81063566 100644 --- a/data/2026/99xxx/CVE-2026-99109.json +++ b/data/2026/99xxx/CVE-2026-99109.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.391Z", "datePublished": "2026-10-28T10:34:27.507Z", - "dateUpdated": "2026-11-06T17:15:07.205Z" + "dateUpdated": "2026-11-10T18:15:24.796Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:07.205Z" + "dateUpdated": "2026-11-10T18:15:24.796Z" }, "descriptions": [ { @@ -49,6 +49,12 @@ "fs/smb/client/cifssmb.c" ], "versions": [ + { + "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "lessThan": "bc737f5f5cc3fcd10bd919527cacc0efd703c30b", + "status": "affected", + "versionType": "git" + }, { "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "79345a5d14b851e9ed28d3a9fe53301661dbcf11", @@ -88,6 +94,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -116,6 +128,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.12", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -140,6 +158,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/bc737f5f5cc3fcd10bd919527cacc0efd703c30b" + }, { "url": "https://git.kernel.org/stable/c/79345a5d14b851e9ed28d3a9fe53301661dbcf11" }, diff --git a/data/2026/99xxx/CVE-2026-99122.json b/data/2026/99xxx/CVE-2026-99122.json index e2aab75d74..b0b65e7bc3 100644 --- a/data/2026/99xxx/CVE-2026-99122.json +++ b/data/2026/99xxx/CVE-2026-99122.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.393Z", "datePublished": "2026-10-28T10:34:37.859Z", - "dateUpdated": "2026-10-31T12:43:23.512Z" + "dateUpdated": "2026-11-10T18:15:25.472Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-31T12:43:23.512Z" + "dateUpdated": "2026-11-10T18:15:25.472Z" }, "descriptions": [ { @@ -49,6 +49,12 @@ "net/vmw_vsock/vmci_transport.c" ], "versions": [ + { + "version": "d021c344051af91f42c5ba9fdedc176740cbd238", + "lessThan": "cdd1f99eaa4d4db82d506eb50e724460671c7cac", + "status": "affected", + "versionType": "git" + }, { "version": "d021c344051af91f42c5ba9fdedc176740cbd238", "lessThan": "c027f8b429dbb2157fc1b503df196e272d947c89", @@ -88,6 +94,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.59", "lessThanOrEqual": "6.18.*", @@ -116,6 +128,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.9", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -140,6 +158,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/cdd1f99eaa4d4db82d506eb50e724460671c7cac" + }, { "url": "https://git.kernel.org/stable/c/c027f8b429dbb2157fc1b503df196e272d947c89" }, diff --git a/data/2026/99xxx/CVE-2026-99146.json b/data/2026/99xxx/CVE-2026-99146.json index 4205487ce0..bf8908fbee 100644 --- a/data/2026/99xxx/CVE-2026-99146.json +++ b/data/2026/99xxx/CVE-2026-99146.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.396Z", "datePublished": "2026-10-28T10:35:02.847Z", - "dateUpdated": "2026-10-28T10:35:02.847Z" + "dateUpdated": "2026-11-10T18:15:25.826Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-10-28T10:35:02.847Z" + "dateUpdated": "2026-11-10T18:15:25.826Z" }, "descriptions": [ { @@ -34,6 +34,12 @@ "drivers/gpu/drm/i915/display/intel_dmc_regs.h" ], "versions": [ + { + "version": "3d5928a168a9546b23c6b3439c6158d7a028326c", + "lessThan": "fe48b4c48d4131192a10bc6ea526a8a36b345501", + "status": "affected", + "versionType": "git" + }, { "version": "3d5928a168a9546b23c6b3439c6158d7a028326c", "lessThan": "ef82b4d5cb4a3fe77c7f99008d78b8c64709e258", @@ -74,6 +80,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.59", "lessThanOrEqual": "6.18.*", @@ -102,6 +114,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -126,6 +144,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/fe48b4c48d4131192a10bc6ea526a8a36b345501" + }, { "url": "https://git.kernel.org/stable/c/ef82b4d5cb4a3fe77c7f99008d78b8c64709e258" }, diff --git a/data/2026/99xxx/CVE-2026-99172.json b/data/2026/99xxx/CVE-2026-99172.json index 6e5905e52b..22fc6fc889 100644 --- a/data/2026/99xxx/CVE-2026-99172.json +++ b/data/2026/99xxx/CVE-2026-99172.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.399Z", "datePublished": "2026-10-28T10:35:27.245Z", - "dateUpdated": "2026-11-06T17:15:07.948Z" + "dateUpdated": "2026-11-10T18:15:26.226Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:07.948Z" + "dateUpdated": "2026-11-10T18:15:26.226Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "ipc/namespace.c" ], "versions": [ + { + "version": "dc55e35f9e810f23dd69cfdc91a3d636023f57a2", + "lessThan": "4dd36cf72d2c6c090958c0d7b542fa8211635d2d", + "status": "affected", + "versionType": "git" + }, { "version": "dc55e35f9e810f23dd69cfdc91a3d636023f57a2", "lessThan": "4aef6ceb4d6acacd53bc047ac4849677c3edbec1", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/4dd36cf72d2c6c090958c0d7b542fa8211635d2d" + }, { "url": "https://git.kernel.org/stable/c/4aef6ceb4d6acacd53bc047ac4849677c3edbec1" }, diff --git a/data/2026/99xxx/CVE-2026-99270.json b/data/2026/99xxx/CVE-2026-99270.json index 945049f519..ae6470ecbc 100644 --- a/data/2026/99xxx/CVE-2026-99270.json +++ b/data/2026/99xxx/CVE-2026-99270.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.404Z", "datePublished": "2026-11-03T12:32:09.364Z", - "dateUpdated": "2026-11-06T17:15:14.125Z" + "dateUpdated": "2026-11-10T18:15:26.715Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-06T17:15:14.125Z" + "dateUpdated": "2026-11-10T18:15:26.715Z" }, "descriptions": [ { @@ -49,6 +49,12 @@ "net/ipv4/inet_connection_sock.c" ], "versions": [ + { + "version": "83fccfc3940c4a2db90fd7e7079f5b465cd8c6af", + "lessThan": "f7fba81b00699360f96ed7d9a47b8c801e74c6f9", + "status": "affected", + "versionType": "git" + }, { "version": "83fccfc3940c4a2db90fd7e7079f5b465cd8c6af", "lessThan": "b3b56e95f6fad7fa7281450b443e861d82616fdb", @@ -93,6 +99,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -115,6 +127,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.2", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -138,6 +156,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/f7fba81b00699360f96ed7d9a47b8c801e74c6f9" + }, { "url": "https://git.kernel.org/stable/c/b3b56e95f6fad7fa7281450b443e861d82616fdb" }, diff --git a/data/2026/99xxx/CVE-2026-99271.json b/data/2026/99xxx/CVE-2026-99271.json index bc41d71c26..dbedf87b57 100644 --- a/data/2026/99xxx/CVE-2026-99271.json +++ b/data/2026/99xxx/CVE-2026-99271.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.404Z", "datePublished": "2026-11-07T14:08:45.047Z", - "dateUpdated": "2026-11-07T14:08:45.047Z" + "dateUpdated": "2026-11-10T18:15:27.042Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-07T14:08:45.047Z" + "dateUpdated": "2026-11-10T18:15:27.042Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "sound/usb/line6/pcm.c" ], "versions": [ + { + "version": "63e20df1e5b2ef8d871ecbdb6c038d554ed1ca74", + "lessThan": "d063975ed22cdc2cb609a9828e5f658448193606", + "status": "affected", + "versionType": "git" + }, { "version": "63e20df1e5b2ef8d871ecbdb6c038d554ed1ca74", "lessThan": "862d9268f40a6e10cef24eb226e738fb69ce8aa7", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/d063975ed22cdc2cb609a9828e5f658448193606" + }, { "url": "https://git.kernel.org/stable/c/862d9268f40a6e10cef24eb226e738fb69ce8aa7" }, diff --git a/data/2026/99xxx/CVE-2026-99273.json b/data/2026/99xxx/CVE-2026-99273.json index 972fceadd7..d734410d10 100644 --- a/data/2026/99xxx/CVE-2026-99273.json +++ b/data/2026/99xxx/CVE-2026-99273.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.405Z", "datePublished": "2026-11-07T14:08:45.585Z", - "dateUpdated": "2026-11-07T14:08:45.585Z" + "dateUpdated": "2026-11-10T18:15:27.637Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-07T14:08:45.585Z" + "dateUpdated": "2026-11-10T18:15:27.637Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/smb/server/smb2pdu.c" ], "versions": [ + { + "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "lessThan": "583ede545a14f275a959772b5e1e50fe3e14b861", + "status": "affected", + "versionType": "git" + }, { "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "06a751809ebd33e95b05bf733697318a17a4872b", @@ -51,6 +57,12 @@ "status": "affected", "versionType": "git" }, + { + "version": "0", + "lessThan": "6.12.117", + "status": "affected", + "versionType": "semver" + }, { "version": "0", "lessThan": "6.18.61", @@ -74,6 +86,12 @@ "fs/smb/server/smb2pdu.c" ], "versions": [ + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -102,6 +120,11 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -123,6 +146,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/583ede545a14f275a959772b5e1e50fe3e14b861" + }, { "url": "https://git.kernel.org/stable/c/06a751809ebd33e95b05bf733697318a17a4872b" }, diff --git a/data/2026/99xxx/CVE-2026-99274.json b/data/2026/99xxx/CVE-2026-99274.json index 027ca4f8c6..9783f6b0f9 100644 --- a/data/2026/99xxx/CVE-2026-99274.json +++ b/data/2026/99xxx/CVE-2026-99274.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.405Z", "datePublished": "2026-11-07T14:08:45.924Z", - "dateUpdated": "2026-11-07T14:08:45.924Z" + "dateUpdated": "2026-11-10T18:15:27.974Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-07T14:08:45.924Z" + "dateUpdated": "2026-11-10T18:15:27.974Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "fs/smb/client/smb2ops.c" ], "versions": [ + { + "version": "2f3ebaba13cebd8badfb9aed31c0cf3cc82eb4f4", + "lessThan": "8e0d425b808c367f5033eb72aa4528ae18473627", + "status": "affected", + "versionType": "git" + }, { "version": "2f3ebaba13cebd8badfb9aed31c0cf3cc82eb4f4", "lessThan": "4a426ca5be7e3dedbe76575b967db04fbf01136f", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/8e0d425b808c367f5033eb72aa4528ae18473627" + }, { "url": "https://git.kernel.org/stable/c/4a426ca5be7e3dedbe76575b967db04fbf01136f" }, diff --git a/data/2026/99xxx/CVE-2026-99281.json b/data/2026/99xxx/CVE-2026-99281.json index fd39de0290..4b5abb6008 100644 --- a/data/2026/99xxx/CVE-2026-99281.json +++ b/data/2026/99xxx/CVE-2026-99281.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.405Z", "datePublished": "2026-11-07T14:08:47.735Z", - "dateUpdated": "2026-11-10T16:57:40.816Z" + "dateUpdated": "2026-11-10T18:15:28.611Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-10T16:57:40.816Z" + "dateUpdated": "2026-11-10T18:15:28.611Z" }, "descriptions": [ { @@ -49,6 +49,12 @@ "drivers/net/tun.c" ], "versions": [ + { + "version": "ca6bb5d7ab22ac79f608fe6cbc6b12de6a5a19f0", + "lessThan": "e0d98aab41b79b88609f33fb4d8e7a80ab8f648d", + "status": "affected", + "versionType": "git" + }, { "version": "ca6bb5d7ab22ac79f608fe6cbc6b12de6a5a19f0", "lessThan": "2f92c0286cfd58bff9d6d54c01a771073d5eb775", @@ -88,6 +94,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -116,6 +128,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.18", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -140,6 +158,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/e0d98aab41b79b88609f33fb4d8e7a80ab8f648d" + }, { "url": "https://git.kernel.org/stable/c/2f92c0286cfd58bff9d6d54c01a771073d5eb775" }, diff --git a/data/2026/99xxx/CVE-2026-99282.json b/data/2026/99xxx/CVE-2026-99282.json index 2ff203d591..9fbe12c285 100644 --- a/data/2026/99xxx/CVE-2026-99282.json +++ b/data/2026/99xxx/CVE-2026-99282.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.405Z", "datePublished": "2026-11-07T14:08:47.978Z", - "dateUpdated": "2026-11-07T14:08:47.978Z" + "dateUpdated": "2026-11-10T18:15:29.554Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-07T14:08:47.978Z" + "dateUpdated": "2026-11-10T18:15:29.554Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "net/sched/sch_teql.c" ], "versions": [ + { + "version": "572a9d7b6fc7f20f573664063324c086be310c42", + "lessThan": "8d5f768780e26cb82c389219ae7fdb1cd7255421", + "status": "affected", + "versionType": "git" + }, { "version": "572a9d7b6fc7f20f573664063324c086be310c42", "lessThan": "fc55d92ae6a4b2e7d062cad6d4c67f6b061d9cde", @@ -72,6 +78,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -100,6 +112,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.33", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -124,6 +142,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/8d5f768780e26cb82c389219ae7fdb1cd7255421" + }, { "url": "https://git.kernel.org/stable/c/fc55d92ae6a4b2e7d062cad6d4c67f6b061d9cde" }, diff --git a/data/2026/99xxx/CVE-2026-99283.json b/data/2026/99xxx/CVE-2026-99283.json index e25cea4b45..dd44cff13a 100644 --- a/data/2026/99xxx/CVE-2026-99283.json +++ b/data/2026/99xxx/CVE-2026-99283.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.405Z", "datePublished": "2026-11-07T20:14:11.433Z", - "dateUpdated": "2026-11-07T20:14:11.433Z" + "dateUpdated": "2026-11-10T18:15:30.084Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-07T20:14:11.433Z" + "dateUpdated": "2026-11-10T18:15:30.084Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "net/netfilter/nf_conntrack_proto_tcp.c" ], "versions": [ + { + "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "lessThan": "4d39a039d0b7737f8475c2431f18572b3b186a3b", + "status": "affected", + "versionType": "git" + }, { "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "0c6d33329960b2d884a399196c8403643d8a9de6", @@ -45,6 +51,12 @@ "status": "affected", "versionType": "git" }, + { + "version": "0", + "lessThan": "6.12.117", + "status": "affected", + "versionType": "semver" + }, { "version": "0", "lessThan": "6.18.61", @@ -62,6 +74,12 @@ "net/netfilter/nf_conntrack_proto_tcp.c" ], "versions": [ + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -84,6 +102,11 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -100,6 +123,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/4d39a039d0b7737f8475c2431f18572b3b186a3b" + }, { "url": "https://git.kernel.org/stable/c/0c6d33329960b2d884a399196c8403643d8a9de6" }, diff --git a/data/2026/99xxx/CVE-2026-99284.json b/data/2026/99xxx/CVE-2026-99284.json index 50fc74c708..f7af6eb119 100644 --- a/data/2026/99xxx/CVE-2026-99284.json +++ b/data/2026/99xxx/CVE-2026-99284.json @@ -8,14 +8,14 @@ "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.405Z", "datePublished": "2026-11-07T20:40:33.661Z", - "dateUpdated": "2026-11-07T20:40:33.661Z" + "dateUpdated": "2026-11-10T18:15:30.724Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", - "dateUpdated": "2026-11-07T20:40:33.661Z" + "dateUpdated": "2026-11-10T18:15:30.724Z" }, "descriptions": [ { @@ -33,6 +33,12 @@ "net/core/skbuff.c" ], "versions": [ + { + "version": "af2806f8f90a150160be898cd85332459c83c5cb", + "lessThan": "fe8477e23dd2ee6bce231d65f2586a333b211dc0", + "status": "affected", + "versionType": "git" + }, { "version": "af2806f8f90a150160be898cd85332459c83c5cb", "lessThan": "1c623e3cbf43f12dd4a72712079bfa247a9b8ba3", @@ -78,6 +84,12 @@ "status": "unaffected", "versionType": "semver" }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, { "version": "6.18.61", "lessThanOrEqual": "6.18.*", @@ -112,6 +124,12 @@ "operator": "OR", "negate": false, "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.14", + "versionEndExcluding": "6.12.117" + }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", @@ -142,6 +160,9 @@ } ], "references": [ + { + "url": "https://git.kernel.org/stable/c/fe8477e23dd2ee6bce231d65f2586a333b211dc0" + }, { "url": "https://git.kernel.org/stable/c/1c623e3cbf43f12dd4a72712079bfa247a9b8ba3" }, diff --git a/data/2026/99xxx/CVE-2026-99286.json b/data/2026/99xxx/CVE-2026-99286.json new file mode 100644 index 0000000000..f115d0dad8 --- /dev/null +++ b/data/2026/99xxx/CVE-2026-99286.json @@ -0,0 +1,148 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-99286", + "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "state": "PUBLISHED", + "assignerShortName": "Linux", + "dateReserved": "2026-09-25T10:25:14.405Z", + "datePublished": "2026-11-10T18:16:53.997Z", + "dateUpdated": "2026-11-10T18:16:53.997Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "shortName": "Linux", + "dateUpdated": "2026-11-10T18:16:53.997Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen-netback: Fix XenBus connection failure cleanup\n\nxenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues\nunder rcu_read_lock. We need to unpublish vif->num_queues before\nsynchronize_net to ensure that readers that come afterwards will not\nread a non-zero vif->num_queues and attempt to access invalid queues.\n\nThis is the same cleanup algorithm as used in backend_disconnect and\nadded in commit b17075d5c198 (\"xen-netback: fix race condition on XenBus\ndisconnect\").\n\nThis is XSA-531" + } + ], + "affected": [ + { + "product": "Linux", + "vendor": "Linux", + "defaultStatus": "unaffected", + "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", + "programFiles": [ + "drivers/net/xen-netback/xenbus.c" + ], + "versions": [ + { + "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "lessThan": "ade3082dcdee17c5767069883936d64ff83f6c9f", + "status": "affected", + "versionType": "git" + }, + { + "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "lessThan": "a97aa838903d15f865d80809f5198ff459c6634a", + "status": "affected", + "versionType": "git" + }, + { + "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", + "lessThan": "07aca7d25ce8578fedde49855983a01c537a782b", + "status": "affected", + "versionType": "git" + }, + { + "version": "0", + "lessThan": "6.12.117", + "status": "affected", + "versionType": "semver" + }, + { + "version": "0", + "lessThan": "6.18.63", + "status": "affected", + "versionType": "semver" + }, + { + "version": "0", + "lessThan": "7.3.4", + "status": "affected", + "versionType": "semver" + } + ] + }, + { + "product": "Linux", + "vendor": "Linux", + "defaultStatus": "affected", + "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", + "programFiles": [ + "drivers/net/xen-netback/xenbus.c" + ], + "versions": [ + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "6.18.63", + "lessThanOrEqual": "6.18.*", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "7.3.4", + "lessThanOrEqual": "7.3.*", + "status": "unaffected", + "versionType": "semver" + } + ] + } + ], + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.12.117" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.18.63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "7.3.4" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://git.kernel.org/stable/c/ade3082dcdee17c5767069883936d64ff83f6c9f" + }, + { + "url": "https://git.kernel.org/stable/c/a97aa838903d15f865d80809f5198ff459c6634a" + }, + { + "url": "https://git.kernel.org/stable/c/07aca7d25ce8578fedde49855983a01c537a782b" + } + ], + "title": "xen-netback: Fix XenBus connection failure cleanup", + "x_generator": { + "engine": "bippy-1.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/99xxx/CVE-2026-99287.json b/data/2026/99xxx/CVE-2026-99287.json new file mode 100644 index 0000000000..3826e09ea8 --- /dev/null +++ b/data/2026/99xxx/CVE-2026-99287.json @@ -0,0 +1,143 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-99287", + "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "state": "PUBLISHED", + "assignerShortName": "Linux", + "dateReserved": "2026-09-25T10:25:14.405Z", + "datePublished": "2026-11-10T18:16:54.253Z", + "dateUpdated": "2026-11-10T18:16:54.253Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "shortName": "Linux", + "dateUpdated": "2026-11-10T18:16:54.253Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen-netback: Zero out sring pointers on unmap\n\nIf xenvif_map_frontend_data_rings() fails when a ring is already mapped,\nit unmaps them via xenvif_unmap_frontend_data_rings() which keeps the\nring pointers unchanged. xenvif_connect_data()'s cleanup path calls\nxenvif_disconnect_queue() which in turn calls\nxenvif_unmap_frontend_data_rings() again, which will attempt to unmap the\npointers a second time.\n\nZero out the ring pointers after they are unmapped to avoid this issue.\n\nThis is XSA-532" + } + ], + "affected": [ + { + "product": "Linux", + "vendor": "Linux", + "defaultStatus": "unaffected", + "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", + "programFiles": [ + "drivers/net/xen-netback/netback.c" + ], + "versions": [ + { + "version": "2ac061ce97f413bfbbdd768f7d2e0fda2e8170df", + "lessThan": "87fd475dc4e354088f6534285388e7b061f54b35", + "status": "affected", + "versionType": "git" + }, + { + "version": "2ac061ce97f413bfbbdd768f7d2e0fda2e8170df", + "lessThan": "c5f54af611ff6fe1d53fa05d8e87b469dc56122b", + "status": "affected", + "versionType": "git" + }, + { + "version": "2ac061ce97f413bfbbdd768f7d2e0fda2e8170df", + "lessThan": "e7ba61734d6ad6adfd5bf617052e590743211669", + "status": "affected", + "versionType": "git" + } + ] + }, + { + "product": "Linux", + "vendor": "Linux", + "defaultStatus": "affected", + "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", + "programFiles": [ + "drivers/net/xen-netback/netback.c" + ], + "versions": [ + { + "version": "5.5", + "status": "affected" + }, + { + "version": "0", + "lessThan": "5.5", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "6.18.63", + "lessThanOrEqual": "6.18.*", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "7.3.4", + "lessThanOrEqual": "7.3.*", + "status": "unaffected", + "versionType": "semver" + } + ] + } + ], + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "6.12.117" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "6.18.63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "7.3.4" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://git.kernel.org/stable/c/87fd475dc4e354088f6534285388e7b061f54b35" + }, + { + "url": "https://git.kernel.org/stable/c/c5f54af611ff6fe1d53fa05d8e87b469dc56122b" + }, + { + "url": "https://git.kernel.org/stable/c/e7ba61734d6ad6adfd5bf617052e590743211669" + } + ], + "title": "xen-netback: Zero out sring pointers on unmap", + "x_generator": { + "engine": "bippy-1.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/2026/99xxx/CVE-2026-99288.json b/data/2026/99xxx/CVE-2026-99288.json new file mode 100644 index 0000000000..a8cfc7540c --- /dev/null +++ b/data/2026/99xxx/CVE-2026-99288.json @@ -0,0 +1,151 @@ +{ + "dataType": "CVE_RECORD", + "dataVersion": "5.2", + "cveMetadata": { + "cveId": "CVE-2026-99288", + "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "state": "PUBLISHED", + "assignerShortName": "Linux", + "dateReserved": "2026-09-25T10:25:14.405Z", + "datePublished": "2026-11-10T18:19:08.557Z", + "dateUpdated": "2026-11-10T18:19:08.557Z" + }, + "containers": { + "cna": { + "providerMetadata": { + "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "shortName": "Linux", + "dateUpdated": "2026-11-10T18:19:08.557Z" + }, + "descriptions": [ + { + "lang": "en", + "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: reject unhashed sockets during established lookups\n\nTCP established ehash lookups are lockless. The socket caches involved\nuse SLAB_TYPESAFE_BY_RCU, so memory can be reused before an RCU reader\nthat retained its old address has finished.\n\nAfter a tuple match, __inet_lookup_established() and\n__inet6_lookup_established() acquire a reference and repeat the tuple\ncheck. They do not check whether the new object is hashed. If the\naddress is reused for a socket with the same tuple, the lookup can\nacquire a reference to the new object and return it while its nulls node\nis unhashed.\n\nA PoC that drives reuse with a SYN cookie request socket reproduced the\ncrash. The new request socket is unhashed and has a NULL rsk_listener.\nA lookup that had loaded the address of the old request socket acquired\nthe reference published by tcp_get_cookie_sock() and returned the new\nobject. tcp_v4_rcv() then read sk_state through the NULL listener.\n\nThe resulting crash was:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000012\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n ...\n Oops: Oops: 0000 [#1] SMP NOPTI\n CPU: 4 UID: 0 PID: 0 Comm: swapper/4 Not tainted 7.3.0-00591-g0e135910deec #1 PREEMPT(lazy)\n ...\n RIP: 0010:tcp_v4_rcv+0x44e/0x1280\n ...\n R10: 0000000000000001 R11: 00000000024ca8c0 R12: 0000000000000000\n ...\n CR2: 0000000000000012 CR3: 0000000103d50004 CR4: 0000000000770ef0\n ...\n Call Trace:\n \n ? raw_local_deliver+0xae/0x240\n ip_protocol_deliver_rcu+0x2d/0x180\n ip_local_deliver_finish+0x84/0x100\n ip_sublist_rcv_finish+0x5f/0x70\n ip_sublist_rcv+0x12a/0x1d0\n ip_list_rcv+0xfd/0x130\n __netif_receive_skb_list_core+0x223/0x250\n netif_receive_skb_list_internal+0x1d2/0x2c0\n ? try_fill_recv+0x39/0x7b0\n napi_complete_done+0x74/0x170\n virtnet_poll+0x445/0x600\n __napi_poll+0x27/0x1e0\n net_rx_action+0x2fe/0x3b0\n handle_softirqs+0xc2/0x2c0\n __irq_exit_rcu+0x74/0xd0\n common_interrupt+0x7f/0x90\n \n ...\n Kernel panic - not syncing: Fatal exception in interrupt\n\nAfter taking a reference, check whether the nulls node is unhashed in\nboth IPv4 and IPv6 established lookups. If it is unhashed or the tuple\nno longer matches, drop the reference and restart the lookup.\n\nLookups racing with the TIME_WAIT hashdance, or with a request being\nreplaced by its child, now restart and find the new socket instead of\nreturning the old one.\n\nRequest sockets that were never inserted into ehash can have a nonzero\nrefcount, and a stale lookup can hold a transient reference. Therefore,\nwhen SYN cookie, Fast Open, and request migration paths fail after\nsetting a nonzero refcount, release the references held by those paths\nwith reqsk_put() instead of freeing the request directly." + } + ], + "affected": [ + { + "product": "Linux", + "vendor": "Linux", + "defaultStatus": "unaffected", + "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", + "programFiles": [ + "net/ipv4/inet_connection_sock.c", + "net/ipv4/inet_hashtables.c", + "net/ipv4/syncookies.c", + "net/ipv4/tcp_input.c", + "net/ipv6/inet6_hashtables.c" + ], + "versions": [ + { + "version": "079096f103faca2dd87342cca6f23d4b34da8871", + "lessThan": "d69100340b4cae08d40f898f1b601032403f6be6", + "status": "affected", + "versionType": "git" + }, + { + "version": "079096f103faca2dd87342cca6f23d4b34da8871", + "lessThan": "8e5172cbd227fae32f3313cba1f3e1b9edb5c4fd", + "status": "affected", + "versionType": "git" + }, + { + "version": "079096f103faca2dd87342cca6f23d4b34da8871", + "lessThan": "eb8a2d156f2c1d862fffdfd1b3432bfbcd939879", + "status": "affected", + "versionType": "git" + } + ] + }, + { + "product": "Linux", + "vendor": "Linux", + "defaultStatus": "affected", + "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", + "programFiles": [ + "net/ipv4/inet_connection_sock.c", + "net/ipv4/inet_hashtables.c", + "net/ipv4/syncookies.c", + "net/ipv4/tcp_input.c", + "net/ipv6/inet6_hashtables.c" + ], + "versions": [ + { + "version": "4.4", + "status": "affected" + }, + { + "version": "0", + "lessThan": "4.4", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "6.12.117", + "lessThanOrEqual": "6.12.*", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "6.18.63", + "lessThanOrEqual": "6.18.*", + "status": "unaffected", + "versionType": "semver" + }, + { + "version": "7.3.4", + "lessThanOrEqual": "7.3.*", + "status": "unaffected", + "versionType": "semver" + } + ] + } + ], + "cpeApplicability": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4", + "versionEndExcluding": "6.12.117" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4", + "versionEndExcluding": "6.18.63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4", + "versionEndExcluding": "7.3.4" + } + ] + } + ] + } + ], + "references": [ + { + "url": "https://git.kernel.org/stable/c/d69100340b4cae08d40f898f1b601032403f6be6" + }, + { + "url": "https://git.kernel.org/stable/c/8e5172cbd227fae32f3313cba1f3e1b9edb5c4fd" + }, + { + "url": "https://git.kernel.org/stable/c/eb8a2d156f2c1d862fffdfd1b3432bfbcd939879" + } + ], + "title": "inet: reject unhashed sockets during established lookups", + "x_generator": { + "engine": "bippy-1.2.0" + } + } + } +} \ No newline at end of file diff --git a/data/delta.json b/data/delta.json index c573d756fb..8ad96d727b 100644 --- a/data/delta.json +++ b/data/delta.json @@ -1,434 +1,56 @@ { - "fetchTime": "2026-11-10T17:50:26.673Z", - "numberOfChanges": 71, + "fetchTime": "2026-11-10T18:35:17.898Z", + "numberOfChanges": 8, "new": [ { - "cveId": "CVE-2026-34489", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-34489", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/34xxx/CVE-2026-34489.json", - "dateUpdated": "2026-11-10T17:44:30.858Z" + "cveId": "CVE-2026-105437", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105437", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105437.json", + "dateUpdated": "2026-11-10T18:34:09.369Z" }, { - "cveId": "CVE-2026-35500", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-35500", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35500.json", - "dateUpdated": "2026-11-10T17:44:34.959Z" - }, - { - "cveId": "CVE-2026-40064", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40064", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40064.json", - "dateUpdated": "2026-11-10T17:44:41.827Z" - }, - { - "cveId": "CVE-2026-40216", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40216", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40216.json", - "dateUpdated": "2026-11-10T17:44:46.097Z" - }, - { - "cveId": "CVE-2026-40424", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40424", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40424.json", - "dateUpdated": "2026-11-10T17:44:49.036Z" - }, - { - "cveId": "CVE-2026-40433", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40433", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40433.json", - "dateUpdated": "2026-11-10T17:44:54.870Z" - }, - { - "cveId": "CVE-2026-40626", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40626", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40626.json", - "dateUpdated": "2026-11-10T17:44:57.838Z" - }, - { - "cveId": "CVE-2026-40694", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40694", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40694.json", - "dateUpdated": "2026-11-10T17:45:02.220Z" - }, - { - "cveId": "CVE-2026-40695", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40695", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40695.json", - "dateUpdated": "2026-11-10T17:45:05.233Z" - }, - { - "cveId": "CVE-2026-40697", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-40697", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/40xxx/CVE-2026-40697.json", - "dateUpdated": "2026-11-10T17:45:08.304Z" - }, - { - "cveId": "CVE-2026-41221", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-41221", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41221.json", - "dateUpdated": "2026-11-10T17:45:15.891Z" - }, - { - "cveId": "CVE-2026-41224", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-41224", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/41xxx/CVE-2026-41224.json", - "dateUpdated": "2026-11-10T17:45:18.958Z" - }, - { - "cveId": "CVE-2026-42056", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42056", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42056.json", - "dateUpdated": "2026-11-10T17:45:22.106Z" - }, - { - "cveId": "CVE-2026-42956", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-42956", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42956.json", - "dateUpdated": "2026-11-10T17:45:28.301Z" - }, - { - "cveId": "CVE-2026-44382", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44382", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44382.json", - "dateUpdated": "2026-11-10T17:45:33.036Z" - }, - { - "cveId": "CVE-2026-44606", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44606", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44606.json", - "dateUpdated": "2026-11-10T17:45:36.326Z" - }, - { - "cveId": "CVE-2026-44624", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44624", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44624.json", - "dateUpdated": "2026-11-10T17:45:39.669Z" - }, - { - "cveId": "CVE-2026-44625", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44625", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44625.json", - "dateUpdated": "2026-11-10T17:45:43.003Z" - }, - { - "cveId": "CVE-2026-44685", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-44685", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44685.json", - "dateUpdated": "2026-11-10T17:45:48.332Z" - }, - { - "cveId": "CVE-2026-49036", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-49036", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/49xxx/CVE-2026-49036.json", - "dateUpdated": "2026-11-10T17:45:55.790Z" - }, - { - "cveId": "CVE-2026-50175", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50175", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50175.json", - "dateUpdated": "2026-11-10T17:46:00.552Z" - }, - { - "cveId": "CVE-2026-50249", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-50249", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/50xxx/CVE-2026-50249.json", - "dateUpdated": "2026-11-10T17:46:05.887Z" - }, - { - "cveId": "CVE-2026-52899", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-52899", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/52xxx/CVE-2026-52899.json", - "dateUpdated": "2026-11-10T17:46:09.330Z" - }, - { - "cveId": "CVE-2026-55709", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55709", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55709.json", - "dateUpdated": "2026-11-10T17:46:12.985Z" - }, - { - "cveId": "CVE-2026-55716", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-55716", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/55xxx/CVE-2026-55716.json", - "dateUpdated": "2026-11-10T17:46:16.549Z" - }, - { - "cveId": "CVE-2026-56432", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56432", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56432.json", - "dateUpdated": "2026-11-10T17:46:20.132Z" - }, - { - "cveId": "CVE-2026-56435", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56435", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56435.json", - "dateUpdated": "2026-11-10T17:46:23.837Z" - }, - { - "cveId": "CVE-2026-56440", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56440", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56440.json", - "dateUpdated": "2026-11-10T17:46:29.405Z" - }, - { - "cveId": "CVE-2026-56759", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-56759", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/56xxx/CVE-2026-56759.json", - "dateUpdated": "2026-11-10T17:46:33.076Z" - }, - { - "cveId": "CVE-2026-57882", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57882", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57882.json", - "dateUpdated": "2026-11-10T17:46:36.852Z" - }, - { - "cveId": "CVE-2026-57890", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57890", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57890.json", - "dateUpdated": "2026-11-10T17:46:42.831Z" - }, - { - "cveId": "CVE-2026-57891", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57891", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57891.json", - "dateUpdated": "2026-11-10T17:46:46.787Z" - }, - { - "cveId": "CVE-2026-57892", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57892", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57892.json", - "dateUpdated": "2026-11-10T17:46:50.571Z" - }, - { - "cveId": "CVE-2026-57893", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-57893", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/57xxx/CVE-2026-57893.json", - "dateUpdated": "2026-11-10T17:46:54.357Z" - }, - { - "cveId": "CVE-2026-59771", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59771", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59771.json", - "dateUpdated": "2026-11-10T17:46:58.137Z" - }, - { - "cveId": "CVE-2026-60020", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60020", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60020.json", - "dateUpdated": "2026-11-10T17:47:01.967Z" - }, - { - "cveId": "CVE-2026-60059", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60059", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60059.json", - "dateUpdated": "2026-11-10T17:47:05.924Z" - }, - { - "cveId": "CVE-2026-60071", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60071", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60071.json", - "dateUpdated": "2026-11-10T17:47:10.374Z" - }, - { - "cveId": "CVE-2026-60133", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60133", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60133.json", - "dateUpdated": "2026-11-10T17:47:14.251Z" - }, - { - "cveId": "CVE-2026-60138", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60138", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60138.json", - "dateUpdated": "2026-11-10T17:47:18.447Z" - }, - { - "cveId": "CVE-2026-60139", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60139", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60139.json", - "dateUpdated": "2026-11-10T17:47:22.913Z" - }, - { - "cveId": "CVE-2026-60141", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60141", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60141.json", - "dateUpdated": "2026-11-10T17:47:27.031Z" - }, - { - "cveId": "CVE-2026-60142", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-60142", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/60xxx/CVE-2026-60142.json", - "dateUpdated": "2026-11-10T17:47:31.218Z" - }, - { - "cveId": "CVE-2026-61377", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61377", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61377.json", - "dateUpdated": "2026-11-10T17:47:35.849Z" - }, - { - "cveId": "CVE-2026-61383", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61383", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61383.json", - "dateUpdated": "2026-11-10T17:47:40.111Z" - }, - { - "cveId": "CVE-2026-61467", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61467", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61467.json", - "dateUpdated": "2026-11-10T17:47:44.385Z" - }, - { - "cveId": "CVE-2026-61468", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61468", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61468.json", - "dateUpdated": "2026-11-10T17:47:48.484Z" - }, - { - "cveId": "CVE-2026-61469", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61469", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61469.json", - "dateUpdated": "2026-11-10T17:47:53.863Z" - }, - { - "cveId": "CVE-2026-61470", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61470", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61470.json", - "dateUpdated": "2026-11-10T17:47:58.054Z" - }, - { - "cveId": "CVE-2026-61473", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61473", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61473.json", - "dateUpdated": "2026-11-10T17:48:02.255Z" - }, - { - "cveId": "CVE-2026-61887", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-61887", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/61xxx/CVE-2026-61887.json", - "dateUpdated": "2026-11-10T17:48:06.439Z" - }, - { - "cveId": "CVE-2026-62275", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62275", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62275.json", - "dateUpdated": "2026-11-10T17:48:10.617Z" - }, - { - "cveId": "CVE-2026-62920", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62920", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62920.json", - "dateUpdated": "2026-11-10T17:48:14.798Z" - }, - { - "cveId": "CVE-2026-62929", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62929", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62929.json", - "dateUpdated": "2026-11-10T17:48:19.147Z" - }, - { - "cveId": "CVE-2026-62930", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62930", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62930.json", - "dateUpdated": "2026-11-10T17:48:23.237Z" - }, - { - "cveId": "CVE-2026-63018", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63018", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63018.json", - "dateUpdated": "2026-11-10T17:48:27.589Z" - }, - { - "cveId": "CVE-2026-63027", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63027", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63027.json", - "dateUpdated": "2026-11-10T17:48:32.030Z" - }, - { - "cveId": "CVE-2026-63028", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63028", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63028.json", - "dateUpdated": "2026-11-10T17:48:36.379Z" - }, - { - "cveId": "CVE-2026-63540", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-63540", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/63xxx/CVE-2026-63540.json", - "dateUpdated": "2026-11-10T17:48:40.945Z" + "cveId": "CVE-2026-125329", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125329", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125329.json", + "dateUpdated": "2026-11-10T18:28:44.663Z" } ], "updated": [ { - "cveId": "CVE-2024-9355", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-9355", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9355.json", - "dateUpdated": "2026-11-10T17:49:15.914Z" + "cveId": "CVE-2026-123279", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123279", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123279.json", + "dateUpdated": "2026-11-10T18:31:10.124Z" }, { - "cveId": "CVE-2026-120222", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120222", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120222.json", - "dateUpdated": "2026-11-10T17:46:47.844Z" + "cveId": "CVE-2026-123280", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123280", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123280.json", + "dateUpdated": "2026-11-10T18:32:35.760Z" }, { - "cveId": "CVE-2026-120474", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120474", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120474.json", - "dateUpdated": "2026-11-10T17:46:05.157Z" + "cveId": "CVE-2026-123281", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123281", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123281.json", + "dateUpdated": "2026-11-10T18:33:45.295Z" }, { - "cveId": "CVE-2026-121220", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121220", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121220.json", - "dateUpdated": "2026-11-10T17:48:39.559Z" + "cveId": "CVE-2026-12067", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12067", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12067.json", + "dateUpdated": "2026-11-10T18:34:51.398Z" }, { - "cveId": "CVE-2026-123087", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123087", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123087.json", - "dateUpdated": "2026-11-10T17:45:11.526Z" + "cveId": "CVE-2026-80301", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-80301", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/80xxx/CVE-2026-80301.json", + "dateUpdated": "2026-11-10T18:33:22.382Z" }, { - "cveId": "CVE-2026-123301", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123301", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123301.json", - "dateUpdated": "2026-11-10T17:47:55.557Z" - }, - { - "cveId": "CVE-2026-123319", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123319", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123319.json", - "dateUpdated": "2026-11-10T17:50:08.481Z" - }, - { - "cveId": "CVE-2026-123320", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123320", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123320.json", - "dateUpdated": "2026-11-10T17:46:35.039Z" - }, - { - "cveId": "CVE-2026-123322", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123322", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123322.json", - "dateUpdated": "2026-11-10T17:45:37.272Z" - }, - { - "cveId": "CVE-2026-16530", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16530", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16530.json", - "dateUpdated": "2026-11-10T17:46:17.674Z" - }, - { - "cveId": "CVE-2026-16531", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-16531", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/16xxx/CVE-2026-16531.json", - "dateUpdated": "2026-11-10T17:46:17.823Z" - }, - { - "cveId": "CVE-2026-84155", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84155", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84155.json", - "dateUpdated": "2026-11-10T17:44:40.339Z" + "cveId": "CVE-2026-80302", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-80302", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/80xxx/CVE-2026-80302.json", + "dateUpdated": "2026-11-10T18:32:31.903Z" } ], "error": [] diff --git a/data/deltaLog.json b/data/deltaLog.json index ef5be18e85..4c06a70975 100644 --- a/data/deltaLog.json +++ b/data/deltaLog.json @@ -1,4 +1,7468 @@ [ + { + "fetchTime": "2026-11-10T18:35:17.898Z", + "numberOfChanges": 8, + "new": [ + { + "cveId": "CVE-2026-105437", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105437", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105437.json", + "dateUpdated": "2026-11-10T18:34:09.369Z" + }, + { + "cveId": "CVE-2026-125329", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125329", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125329.json", + "dateUpdated": "2026-11-10T18:28:44.663Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-123279", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123279", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123279.json", + "dateUpdated": "2026-11-10T18:31:10.124Z" + }, + { + "cveId": "CVE-2026-123280", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123280", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123280.json", + "dateUpdated": "2026-11-10T18:32:35.760Z" + }, + { + "cveId": "CVE-2026-123281", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123281", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123281.json", + "dateUpdated": "2026-11-10T18:33:45.295Z" + }, + { + "cveId": "CVE-2026-12067", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-12067", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/12xxx/CVE-2026-12067.json", + "dateUpdated": "2026-11-10T18:34:51.398Z" + }, + { + "cveId": "CVE-2026-80301", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-80301", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/80xxx/CVE-2026-80301.json", + "dateUpdated": "2026-11-10T18:33:22.382Z" + }, + { + "cveId": "CVE-2026-80302", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-80302", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/80xxx/CVE-2026-80302.json", + "dateUpdated": "2026-11-10T18:32:31.903Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T18:28:35.311Z", + "numberOfChanges": 283, + "new": [ + { + "cveId": "CVE-2026-116717", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116717", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116717.json", + "dateUpdated": "2026-11-10T18:24:16.843Z" + }, + { + "cveId": "CVE-2026-116718", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116718", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116718.json", + "dateUpdated": "2026-11-10T18:24:17.375Z" + }, + { + "cveId": "CVE-2026-116719", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116719", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116719.json", + "dateUpdated": "2026-11-10T18:24:17.862Z" + }, + { + "cveId": "CVE-2026-116720", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116720", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116720.json", + "dateUpdated": "2026-11-10T18:24:18.453Z" + }, + { + "cveId": "CVE-2026-116721", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116721", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116721.json", + "dateUpdated": "2026-11-10T18:24:18.920Z" + }, + { + "cveId": "CVE-2026-116722", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116722", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116722.json", + "dateUpdated": "2026-11-10T18:24:19.456Z" + }, + { + "cveId": "CVE-2026-116922", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116922", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116922.json", + "dateUpdated": "2026-11-10T18:24:19.914Z" + }, + { + "cveId": "CVE-2026-116923", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116923", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116923.json", + "dateUpdated": "2026-11-10T18:24:20.447Z" + }, + { + "cveId": "CVE-2026-116926", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116926", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116926.json", + "dateUpdated": "2026-11-10T18:24:21.050Z" + }, + { + "cveId": "CVE-2026-116927", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116927", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116927.json", + "dateUpdated": "2026-11-10T18:24:21.522Z" + }, + { + "cveId": "CVE-2026-116929", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116929", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116929.json", + "dateUpdated": "2026-11-10T18:24:22.056Z" + }, + { + "cveId": "CVE-2026-116930", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116930", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116930.json", + "dateUpdated": "2026-11-10T18:24:22.571Z" + }, + { + "cveId": "CVE-2026-116931", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116931", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116931.json", + "dateUpdated": "2026-11-10T18:24:23.159Z" + }, + { + "cveId": "CVE-2026-116932", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116932", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116932.json", + "dateUpdated": "2026-11-10T18:24:23.749Z" + }, + { + "cveId": "CVE-2026-116933", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116933", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116933.json", + "dateUpdated": "2026-11-10T18:24:24.215Z" + }, + { + "cveId": "CVE-2026-116934", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116934", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116934.json", + "dateUpdated": "2026-11-10T18:24:24.759Z" + }, + { + "cveId": "CVE-2026-116935", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116935", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116935.json", + "dateUpdated": "2026-11-10T18:24:25.310Z" + }, + { + "cveId": "CVE-2026-116936", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116936", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116936.json", + "dateUpdated": "2026-11-10T18:24:25.821Z" + }, + { + "cveId": "CVE-2026-116937", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116937", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116937.json", + "dateUpdated": "2026-11-10T18:24:26.408Z" + }, + { + "cveId": "CVE-2026-116938", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116938", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116938.json", + "dateUpdated": "2026-11-10T18:24:27.012Z" + }, + { + "cveId": "CVE-2026-116939", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116939", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116939.json", + "dateUpdated": "2026-11-10T18:24:27.610Z" + }, + { + "cveId": "CVE-2026-116940", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116940", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116940.json", + "dateUpdated": "2026-11-10T18:24:28.159Z" + }, + { + "cveId": "CVE-2026-116941", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116941", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116941.json", + "dateUpdated": "2026-11-10T18:24:28.600Z" + }, + { + "cveId": "CVE-2026-116942", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116942", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116942.json", + "dateUpdated": "2026-11-10T18:24:29.184Z" + }, + { + "cveId": "CVE-2026-116943", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116943", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116943.json", + "dateUpdated": "2026-11-10T18:24:29.702Z" + }, + { + "cveId": "CVE-2026-116944", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116944", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116944.json", + "dateUpdated": "2026-11-10T18:24:30.299Z" + }, + { + "cveId": "CVE-2026-116945", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116945", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116945.json", + "dateUpdated": "2026-11-10T18:24:30.902Z" + }, + { + "cveId": "CVE-2026-116946", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116946", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116946.json", + "dateUpdated": "2026-11-10T18:24:31.411Z" + }, + { + "cveId": "CVE-2026-116947", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116947", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116947.json", + "dateUpdated": "2026-11-10T18:24:31.917Z" + }, + { + "cveId": "CVE-2026-118102", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118102", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118102.json", + "dateUpdated": "2026-11-10T18:24:32.443Z" + }, + { + "cveId": "CVE-2026-118103", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118103", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118103.json", + "dateUpdated": "2026-11-10T18:24:33.058Z" + }, + { + "cveId": "CVE-2026-118104", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118104", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118104.json", + "dateUpdated": "2026-11-10T18:24:33.577Z" + }, + { + "cveId": "CVE-2026-118105", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118105", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118105.json", + "dateUpdated": "2026-11-10T18:24:34.113Z" + }, + { + "cveId": "CVE-2026-118106", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118106", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118106.json", + "dateUpdated": "2026-11-10T18:24:34.578Z" + }, + { + "cveId": "CVE-2026-118108", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118108", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118108.json", + "dateUpdated": "2026-11-10T18:24:35.103Z" + }, + { + "cveId": "CVE-2026-118109", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118109", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118109.json", + "dateUpdated": "2026-11-10T18:24:35.707Z" + }, + { + "cveId": "CVE-2026-118110", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118110", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118110.json", + "dateUpdated": "2026-11-10T18:24:36.304Z" + }, + { + "cveId": "CVE-2026-118111", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118111", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118111.json", + "dateUpdated": "2026-11-10T18:24:36.756Z" + }, + { + "cveId": "CVE-2026-118112", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118112", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118112.json", + "dateUpdated": "2026-11-10T18:24:37.257Z" + }, + { + "cveId": "CVE-2026-118113", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118113", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118113.json", + "dateUpdated": "2026-11-10T18:24:37.769Z" + }, + { + "cveId": "CVE-2026-118114", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118114", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118114.json", + "dateUpdated": "2026-11-10T18:24:38.270Z" + }, + { + "cveId": "CVE-2026-118115", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118115", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118115.json", + "dateUpdated": "2026-11-10T18:24:38.851Z" + }, + { + "cveId": "CVE-2026-118116", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118116", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118116.json", + "dateUpdated": "2026-11-10T18:24:40.256Z" + }, + { + "cveId": "CVE-2026-118117", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118117", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118117.json", + "dateUpdated": "2026-11-10T18:24:40.774Z" + }, + { + "cveId": "CVE-2026-118118", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118118", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118118.json", + "dateUpdated": "2026-11-10T18:24:41.361Z" + }, + { + "cveId": "CVE-2026-118119", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118119", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118119.json", + "dateUpdated": "2026-11-10T18:24:41.873Z" + }, + { + "cveId": "CVE-2026-118120", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118120", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118120.json", + "dateUpdated": "2026-11-10T18:24:42.371Z" + }, + { + "cveId": "CVE-2026-118148", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118148", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118148.json", + "dateUpdated": "2026-11-10T18:24:43.000Z" + }, + { + "cveId": "CVE-2026-118288", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118288", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118288.json", + "dateUpdated": "2026-11-10T18:24:14.589Z" + }, + { + "cveId": "CVE-2026-118292", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118292", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118292.json", + "dateUpdated": "2026-11-10T18:24:43.606Z" + }, + { + "cveId": "CVE-2026-118293", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118293", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118293.json", + "dateUpdated": "2026-11-10T18:24:44.148Z" + }, + { + "cveId": "CVE-2026-118294", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118294", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118294.json", + "dateUpdated": "2026-11-10T18:24:44.743Z" + }, + { + "cveId": "CVE-2026-118295", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118295", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118295.json", + "dateUpdated": "2026-11-10T18:24:45.283Z" + }, + { + "cveId": "CVE-2026-118296", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118296", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118296.json", + "dateUpdated": "2026-11-10T18:24:45.874Z" + }, + { + "cveId": "CVE-2026-118297", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118297", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118297.json", + "dateUpdated": "2026-11-10T18:24:46.389Z" + }, + { + "cveId": "CVE-2026-118298", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118298", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118298.json", + "dateUpdated": "2026-11-10T18:24:46.960Z" + }, + { + "cveId": "CVE-2026-118299", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118299", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118299.json", + "dateUpdated": "2026-11-10T18:24:47.539Z" + }, + { + "cveId": "CVE-2026-118300", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118300", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118300.json", + "dateUpdated": "2026-11-10T18:24:47.990Z" + }, + { + "cveId": "CVE-2026-118301", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118301", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118301.json", + "dateUpdated": "2026-11-10T18:24:48.517Z" + }, + { + "cveId": "CVE-2026-118302", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118302", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118302.json", + "dateUpdated": "2026-11-10T18:24:49.028Z" + }, + { + "cveId": "CVE-2026-118700", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118700", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118700.json", + "dateUpdated": "2026-11-10T18:24:49.541Z" + }, + { + "cveId": "CVE-2026-118701", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118701", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118701.json", + "dateUpdated": "2026-11-10T18:24:49.993Z" + }, + { + "cveId": "CVE-2026-118702", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118702", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118702.json", + "dateUpdated": "2026-11-10T18:24:50.522Z" + }, + { + "cveId": "CVE-2026-118703", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118703", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118703.json", + "dateUpdated": "2026-11-10T18:24:50.975Z" + }, + { + "cveId": "CVE-2026-118704", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118704", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118704.json", + "dateUpdated": "2026-11-10T18:24:51.485Z" + }, + { + "cveId": "CVE-2026-118705", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118705", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118705.json", + "dateUpdated": "2026-11-10T18:24:51.940Z" + }, + { + "cveId": "CVE-2026-118706", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118706", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118706.json", + "dateUpdated": "2026-11-10T18:24:52.374Z" + }, + { + "cveId": "CVE-2026-118707", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118707", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118707.json", + "dateUpdated": "2026-11-10T18:24:52.883Z" + }, + { + "cveId": "CVE-2026-118708", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118708", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118708.json", + "dateUpdated": "2026-11-10T18:24:53.315Z" + }, + { + "cveId": "CVE-2026-118709", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118709", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118709.json", + "dateUpdated": "2026-11-10T18:24:53.773Z" + }, + { + "cveId": "CVE-2026-118710", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118710", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118710.json", + "dateUpdated": "2026-11-10T18:24:54.284Z" + }, + { + "cveId": "CVE-2026-118711", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118711", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118711.json", + "dateUpdated": "2026-11-10T18:24:54.798Z" + }, + { + "cveId": "CVE-2026-118712", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118712", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118712.json", + "dateUpdated": "2026-11-10T18:24:55.312Z" + }, + { + "cveId": "CVE-2026-118713", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118713", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118713.json", + "dateUpdated": "2026-11-10T18:24:55.759Z" + }, + { + "cveId": "CVE-2026-118714", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118714", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118714.json", + "dateUpdated": "2026-11-10T18:24:56.346Z" + }, + { + "cveId": "CVE-2026-118715", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118715", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118715.json", + "dateUpdated": "2026-11-10T18:24:56.866Z" + }, + { + "cveId": "CVE-2026-118716", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118716", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118716.json", + "dateUpdated": "2026-11-10T18:24:57.452Z" + }, + { + "cveId": "CVE-2026-118717", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118717", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118717.json", + "dateUpdated": "2026-11-10T18:24:57.976Z" + }, + { + "cveId": "CVE-2026-118718", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118718", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118718.json", + "dateUpdated": "2026-11-10T18:24:58.509Z" + }, + { + "cveId": "CVE-2026-118719", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118719", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118719.json", + "dateUpdated": "2026-11-10T18:24:59.041Z" + }, + { + "cveId": "CVE-2026-118720", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118720", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118720.json", + "dateUpdated": "2026-11-10T18:24:59.554Z" + }, + { + "cveId": "CVE-2026-118721", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118721", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118721.json", + "dateUpdated": "2026-11-10T18:24:59.990Z" + }, + { + "cveId": "CVE-2026-118722", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118722", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118722.json", + "dateUpdated": "2026-11-10T18:25:00.573Z" + }, + { + "cveId": "CVE-2026-118723", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118723", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118723.json", + "dateUpdated": "2026-11-10T18:25:01.094Z" + }, + { + "cveId": "CVE-2026-118724", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118724", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118724.json", + "dateUpdated": "2026-11-10T18:25:01.680Z" + }, + { + "cveId": "CVE-2026-118725", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118725", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118725.json", + "dateUpdated": "2026-11-10T18:25:02.259Z" + }, + { + "cveId": "CVE-2026-118726", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118726", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118726.json", + "dateUpdated": "2026-11-10T18:25:02.796Z" + }, + { + "cveId": "CVE-2026-118727", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118727", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118727.json", + "dateUpdated": "2026-11-10T18:25:03.390Z" + }, + { + "cveId": "CVE-2026-118728", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118728", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118728.json", + "dateUpdated": "2026-11-10T18:25:03.932Z" + }, + { + "cveId": "CVE-2026-118729", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118729", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118729.json", + "dateUpdated": "2026-11-10T18:25:04.525Z" + }, + { + "cveId": "CVE-2026-118730", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118730", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118730.json", + "dateUpdated": "2026-11-10T18:25:05.048Z" + }, + { + "cveId": "CVE-2026-118731", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118731", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118731.json", + "dateUpdated": "2026-11-10T18:25:05.592Z" + }, + { + "cveId": "CVE-2026-118732", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118732", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118732.json", + "dateUpdated": "2026-11-10T18:25:06.123Z" + }, + { + "cveId": "CVE-2026-118740", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118740", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118740.json", + "dateUpdated": "2026-11-10T18:24:15.124Z" + }, + { + "cveId": "CVE-2026-118741", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118741", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118741.json", + "dateUpdated": "2026-11-10T18:24:15.572Z" + }, + { + "cveId": "CVE-2026-119382", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119382", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119382.json", + "dateUpdated": "2026-11-10T18:24:16.231Z" + }, + { + "cveId": "CVE-2026-119402", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119402", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119402.json", + "dateUpdated": "2026-11-10T18:22:34.995Z" + }, + { + "cveId": "CVE-2026-119403", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119403", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119403.json", + "dateUpdated": "2026-11-10T18:22:35.523Z" + }, + { + "cveId": "CVE-2026-119404", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119404", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119404.json", + "dateUpdated": "2026-11-10T18:22:36.028Z" + }, + { + "cveId": "CVE-2026-119405", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119405", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119405.json", + "dateUpdated": "2026-11-10T18:22:36.610Z" + }, + { + "cveId": "CVE-2026-119816", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119816", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119816.json", + "dateUpdated": "2026-11-10T18:22:37.121Z" + }, + { + "cveId": "CVE-2026-119817", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119817", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119817.json", + "dateUpdated": "2026-11-10T18:22:37.712Z" + }, + { + "cveId": "CVE-2026-119818", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119818", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119818.json", + "dateUpdated": "2026-11-10T18:22:38.289Z" + }, + { + "cveId": "CVE-2026-119821", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119821", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119821.json", + "dateUpdated": "2026-11-10T18:22:38.806Z" + }, + { + "cveId": "CVE-2026-119822", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119822", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119822.json", + "dateUpdated": "2026-11-10T18:22:39.833Z" + }, + { + "cveId": "CVE-2026-119823", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119823", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119823.json", + "dateUpdated": "2026-11-10T18:22:40.655Z" + }, + { + "cveId": "CVE-2026-119824", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119824", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119824.json", + "dateUpdated": "2026-11-10T18:22:41.226Z" + }, + { + "cveId": "CVE-2026-119825", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119825", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119825.json", + "dateUpdated": "2026-11-10T18:22:41.801Z" + }, + { + "cveId": "CVE-2026-119826", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119826", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119826.json", + "dateUpdated": "2026-11-10T18:22:42.247Z" + }, + { + "cveId": "CVE-2026-119827", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119827", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119827.json", + "dateUpdated": "2026-11-10T18:22:42.769Z" + }, + { + "cveId": "CVE-2026-119829", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119829", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119829.json", + "dateUpdated": "2026-11-10T18:22:43.490Z" + }, + { + "cveId": "CVE-2026-119830", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119830", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119830.json", + "dateUpdated": "2026-11-10T18:22:44.088Z" + }, + { + "cveId": "CVE-2026-119831", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119831", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119831.json", + "dateUpdated": "2026-11-10T18:22:44.618Z" + }, + { + "cveId": "CVE-2026-119832", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119832", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119832.json", + "dateUpdated": "2026-11-10T18:22:45.185Z" + }, + { + "cveId": "CVE-2026-119833", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119833", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119833.json", + "dateUpdated": "2026-11-10T18:22:45.733Z" + }, + { + "cveId": "CVE-2026-119834", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119834", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119834.json", + "dateUpdated": "2026-11-10T18:22:46.331Z" + }, + { + "cveId": "CVE-2026-119835", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119835", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119835.json", + "dateUpdated": "2026-11-10T18:22:46.815Z" + }, + { + "cveId": "CVE-2026-119836", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119836", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119836.json", + "dateUpdated": "2026-11-10T18:22:47.381Z" + }, + { + "cveId": "CVE-2026-119837", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119837", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119837.json", + "dateUpdated": "2026-11-10T18:22:47.911Z" + }, + { + "cveId": "CVE-2026-119838", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119838", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119838.json", + "dateUpdated": "2026-11-10T18:22:48.500Z" + }, + { + "cveId": "CVE-2026-119839", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119839", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119839.json", + "dateUpdated": "2026-11-10T18:22:48.945Z" + }, + { + "cveId": "CVE-2026-119840", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119840", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119840.json", + "dateUpdated": "2026-11-10T18:22:49.460Z" + }, + { + "cveId": "CVE-2026-119841", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119841", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119841.json", + "dateUpdated": "2026-11-10T18:22:49.908Z" + }, + { + "cveId": "CVE-2026-119844", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119844", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119844.json", + "dateUpdated": "2026-11-10T18:22:50.386Z" + }, + { + "cveId": "CVE-2026-119846", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119846", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119846.json", + "dateUpdated": "2026-11-10T18:22:51.105Z" + }, + { + "cveId": "CVE-2026-119847", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119847", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119847.json", + "dateUpdated": "2026-11-10T18:22:51.554Z" + }, + { + "cveId": "CVE-2026-119848", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119848", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119848.json", + "dateUpdated": "2026-11-10T18:22:52.066Z" + }, + { + "cveId": "CVE-2026-119849", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119849", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119849.json", + "dateUpdated": "2026-11-10T18:22:52.571Z" + }, + { + "cveId": "CVE-2026-119851", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119851", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119851.json", + "dateUpdated": "2026-11-10T18:22:53.098Z" + }, + { + "cveId": "CVE-2026-119852", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119852", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119852.json", + "dateUpdated": "2026-11-10T18:22:53.624Z" + }, + { + "cveId": "CVE-2026-119853", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119853", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119853.json", + "dateUpdated": "2026-11-10T18:22:54.218Z" + }, + { + "cveId": "CVE-2026-119855", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119855", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119855.json", + "dateUpdated": "2026-11-10T18:22:54.668Z" + }, + { + "cveId": "CVE-2026-119856", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119856", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119856.json", + "dateUpdated": "2026-11-10T18:22:55.180Z" + }, + { + "cveId": "CVE-2026-119857", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119857", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119857.json", + "dateUpdated": "2026-11-10T18:22:56.459Z" + }, + { + "cveId": "CVE-2026-119858", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119858", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119858.json", + "dateUpdated": "2026-11-10T18:22:55.885Z" + }, + { + "cveId": "CVE-2026-119859", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119859", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119859.json", + "dateUpdated": "2026-11-10T18:22:56.988Z" + }, + { + "cveId": "CVE-2026-119860", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119860", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119860.json", + "dateUpdated": "2026-11-10T18:22:57.526Z" + }, + { + "cveId": "CVE-2026-119861", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119861", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119861.json", + "dateUpdated": "2026-11-10T18:22:58.048Z" + }, + { + "cveId": "CVE-2026-119862", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119862", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119862.json", + "dateUpdated": "2026-11-10T18:22:58.565Z" + }, + { + "cveId": "CVE-2026-119865", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119865", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119865.json", + "dateUpdated": "2026-11-10T18:22:59.024Z" + }, + { + "cveId": "CVE-2026-119866", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119866", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119866.json", + "dateUpdated": "2026-11-10T18:22:59.481Z" + }, + { + "cveId": "CVE-2026-119867", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119867", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119867.json", + "dateUpdated": "2026-11-10T18:23:00.038Z" + }, + { + "cveId": "CVE-2026-119868", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119868", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119868.json", + "dateUpdated": "2026-11-10T18:23:00.551Z" + }, + { + "cveId": "CVE-2026-119869", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119869", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119869.json", + "dateUpdated": "2026-11-10T18:23:01.061Z" + }, + { + "cveId": "CVE-2026-119870", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119870", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119870.json", + "dateUpdated": "2026-11-10T18:23:02.165Z" + }, + { + "cveId": "CVE-2026-119871", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119871", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119871.json", + "dateUpdated": "2026-11-10T18:23:02.929Z" + }, + { + "cveId": "CVE-2026-119872", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119872", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119872.json", + "dateUpdated": "2026-11-10T18:23:04.774Z" + }, + { + "cveId": "CVE-2026-119873", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119873", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119873.json", + "dateUpdated": "2026-11-10T18:23:05.445Z" + }, + { + "cveId": "CVE-2026-119874", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119874", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119874.json", + "dateUpdated": "2026-11-10T18:23:05.976Z" + }, + { + "cveId": "CVE-2026-119875", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119875", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119875.json", + "dateUpdated": "2026-11-10T18:23:06.712Z" + }, + { + "cveId": "CVE-2026-119876", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119876", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119876.json", + "dateUpdated": "2026-11-10T18:23:07.158Z" + }, + { + "cveId": "CVE-2026-119880", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119880", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119880.json", + "dateUpdated": "2026-11-10T18:23:07.860Z" + }, + { + "cveId": "CVE-2026-119881", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119881", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119881.json", + "dateUpdated": "2026-11-10T18:23:08.325Z" + }, + { + "cveId": "CVE-2026-119882", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119882", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119882.json", + "dateUpdated": "2026-11-10T18:23:08.995Z" + }, + { + "cveId": "CVE-2026-119883", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119883", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119883.json", + "dateUpdated": "2026-11-10T18:23:09.702Z" + }, + { + "cveId": "CVE-2026-119884", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119884", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119884.json", + "dateUpdated": "2026-11-10T18:23:10.342Z" + }, + { + "cveId": "CVE-2026-119885", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119885", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119885.json", + "dateUpdated": "2026-11-10T18:23:11.508Z" + }, + { + "cveId": "CVE-2026-119886", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119886", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119886.json", + "dateUpdated": "2026-11-10T18:23:12.012Z" + }, + { + "cveId": "CVE-2026-119887", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119887", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119887.json", + "dateUpdated": "2026-11-10T18:23:12.620Z" + }, + { + "cveId": "CVE-2026-119888", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119888", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119888.json", + "dateUpdated": "2026-11-10T18:23:13.223Z" + }, + { + "cveId": "CVE-2026-119889", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119889", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119889.json", + "dateUpdated": "2026-11-10T18:23:13.816Z" + }, + { + "cveId": "CVE-2026-119890", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119890", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119890.json", + "dateUpdated": "2026-11-10T18:23:14.339Z" + }, + { + "cveId": "CVE-2026-119892", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119892", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119892.json", + "dateUpdated": "2026-11-10T18:23:14.941Z" + }, + { + "cveId": "CVE-2026-119893", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119893", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119893.json", + "dateUpdated": "2026-11-10T18:23:15.507Z" + }, + { + "cveId": "CVE-2026-119894", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119894", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119894.json", + "dateUpdated": "2026-11-10T18:23:16.061Z" + }, + { + "cveId": "CVE-2026-119895", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119895", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119895.json", + "dateUpdated": "2026-11-10T18:23:16.578Z" + }, + { + "cveId": "CVE-2026-119898", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119898", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119898.json", + "dateUpdated": "2026-11-10T18:23:18.241Z" + }, + { + "cveId": "CVE-2026-119899", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119899", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119899.json", + "dateUpdated": "2026-11-10T18:23:19.893Z" + }, + { + "cveId": "CVE-2026-119900", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119900", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119900.json", + "dateUpdated": "2026-11-10T18:23:18.860Z" + }, + { + "cveId": "CVE-2026-119901", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119901", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119901.json", + "dateUpdated": "2026-11-10T18:23:19.438Z" + }, + { + "cveId": "CVE-2026-119903", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119903", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119903.json", + "dateUpdated": "2026-11-10T18:23:17.158Z" + }, + { + "cveId": "CVE-2026-119904", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119904", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119904.json", + "dateUpdated": "2026-11-10T18:23:20.415Z" + }, + { + "cveId": "CVE-2026-119905", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119905", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119905.json", + "dateUpdated": "2026-11-10T18:23:17.630Z" + }, + { + "cveId": "CVE-2026-119906", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119906", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119906.json", + "dateUpdated": "2026-11-10T18:23:21.400Z" + }, + { + "cveId": "CVE-2026-119907", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119907", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119907.json", + "dateUpdated": "2026-11-10T18:23:20.858Z" + }, + { + "cveId": "CVE-2026-119908", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119908", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119908.json", + "dateUpdated": "2026-11-10T18:23:21.842Z" + }, + { + "cveId": "CVE-2026-119909", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119909", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119909.json", + "dateUpdated": "2026-11-10T18:23:22.422Z" + }, + { + "cveId": "CVE-2026-119910", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119910", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119910.json", + "dateUpdated": "2026-11-10T18:23:23.063Z" + }, + { + "cveId": "CVE-2026-119912", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119912", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119912.json", + "dateUpdated": "2026-11-10T18:23:23.518Z" + }, + { + "cveId": "CVE-2026-119913", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119913", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119913.json", + "dateUpdated": "2026-11-10T18:23:23.966Z" + }, + { + "cveId": "CVE-2026-119914", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119914", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119914.json", + "dateUpdated": "2026-11-10T18:23:24.530Z" + }, + { + "cveId": "CVE-2026-119916", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119916", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119916.json", + "dateUpdated": "2026-11-10T18:23:25.160Z" + }, + { + "cveId": "CVE-2026-119917", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119917", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119917.json", + "dateUpdated": "2026-11-10T18:23:25.792Z" + }, + { + "cveId": "CVE-2026-119918", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119918", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119918.json", + "dateUpdated": "2026-11-10T18:23:26.383Z" + }, + { + "cveId": "CVE-2026-119919", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119919", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119919.json", + "dateUpdated": "2026-11-10T18:23:26.950Z" + }, + { + "cveId": "CVE-2026-119921", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119921", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119921.json", + "dateUpdated": "2026-11-10T18:23:27.405Z" + }, + { + "cveId": "CVE-2026-119925", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119925", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119925.json", + "dateUpdated": "2026-11-10T18:23:27.923Z" + }, + { + "cveId": "CVE-2026-119928", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119928", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119928.json", + "dateUpdated": "2026-11-10T18:23:28.571Z" + }, + { + "cveId": "CVE-2026-119929", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119929", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119929.json", + "dateUpdated": "2026-11-10T18:23:29.103Z" + }, + { + "cveId": "CVE-2026-119931", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119931", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119931.json", + "dateUpdated": "2026-11-10T18:23:29.619Z" + }, + { + "cveId": "CVE-2026-119932", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119932", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119932.json", + "dateUpdated": "2026-11-10T18:23:30.171Z" + }, + { + "cveId": "CVE-2026-119933", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119933", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119933.json", + "dateUpdated": "2026-11-10T18:23:30.620Z" + }, + { + "cveId": "CVE-2026-119934", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119934", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119934.json", + "dateUpdated": "2026-11-10T18:23:31.141Z" + }, + { + "cveId": "CVE-2026-119935", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119935", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119935.json", + "dateUpdated": "2026-11-10T18:23:31.758Z" + }, + { + "cveId": "CVE-2026-119936", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119936", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119936.json", + "dateUpdated": "2026-11-10T18:23:32.214Z" + }, + { + "cveId": "CVE-2026-119937", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119937", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119937.json", + "dateUpdated": "2026-11-10T18:23:32.750Z" + }, + { + "cveId": "CVE-2026-119938", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119938", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119938.json", + "dateUpdated": "2026-11-10T18:23:33.335Z" + }, + { + "cveId": "CVE-2026-119939", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119939", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119939.json", + "dateUpdated": "2026-11-10T18:23:33.858Z" + }, + { + "cveId": "CVE-2026-119940", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119940", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119940.json", + "dateUpdated": "2026-11-10T18:23:34.366Z" + }, + { + "cveId": "CVE-2026-119941", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119941", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119941.json", + "dateUpdated": "2026-11-10T18:23:35.226Z" + }, + { + "cveId": "CVE-2026-119942", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119942", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119942.json", + "dateUpdated": "2026-11-10T18:23:35.746Z" + }, + { + "cveId": "CVE-2026-119943", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119943", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119943.json", + "dateUpdated": "2026-11-10T18:23:36.337Z" + }, + { + "cveId": "CVE-2026-119944", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119944", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119944.json", + "dateUpdated": "2026-11-10T18:23:36.871Z" + }, + { + "cveId": "CVE-2026-119945", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119945", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119945.json", + "dateUpdated": "2026-11-10T18:23:37.398Z" + }, + { + "cveId": "CVE-2026-119946", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119946", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119946.json", + "dateUpdated": "2026-11-10T18:23:37.920Z" + }, + { + "cveId": "CVE-2026-119947", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119947", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119947.json", + "dateUpdated": "2026-11-10T18:23:38.429Z" + }, + { + "cveId": "CVE-2026-119948", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119948", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119948.json", + "dateUpdated": "2026-11-10T18:23:39.116Z" + }, + { + "cveId": "CVE-2026-119950", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119950", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119950.json", + "dateUpdated": "2026-11-10T18:23:40.563Z" + }, + { + "cveId": "CVE-2026-119951", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119951", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119951.json", + "dateUpdated": "2026-11-10T18:23:41.095Z" + }, + { + "cveId": "CVE-2026-119952", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119952", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119952.json", + "dateUpdated": "2026-11-10T18:23:41.678Z" + }, + { + "cveId": "CVE-2026-119953", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119953", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119953.json", + "dateUpdated": "2026-11-10T18:23:42.344Z" + }, + { + "cveId": "CVE-2026-119954", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119954", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119954.json", + "dateUpdated": "2026-11-10T18:23:42.932Z" + }, + { + "cveId": "CVE-2026-119955", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119955", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119955.json", + "dateUpdated": "2026-11-10T18:23:43.510Z" + }, + { + "cveId": "CVE-2026-119957", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119957", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119957.json", + "dateUpdated": "2026-11-10T18:23:44.135Z" + }, + { + "cveId": "CVE-2026-119958", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119958", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119958.json", + "dateUpdated": "2026-11-10T18:23:44.657Z" + }, + { + "cveId": "CVE-2026-119960", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119960", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119960.json", + "dateUpdated": "2026-11-10T18:23:45.279Z" + }, + { + "cveId": "CVE-2026-119961", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119961", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119961.json", + "dateUpdated": "2026-11-10T18:23:45.724Z" + }, + { + "cveId": "CVE-2026-119962", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119962", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119962.json", + "dateUpdated": "2026-11-10T18:23:46.313Z" + }, + { + "cveId": "CVE-2026-119963", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119963", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119963.json", + "dateUpdated": "2026-11-10T18:23:46.832Z" + }, + { + "cveId": "CVE-2026-119964", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119964", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119964.json", + "dateUpdated": "2026-11-10T18:23:47.286Z" + }, + { + "cveId": "CVE-2026-119965", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119965", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119965.json", + "dateUpdated": "2026-11-10T18:23:47.805Z" + }, + { + "cveId": "CVE-2026-119966", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119966", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119966.json", + "dateUpdated": "2026-11-10T18:23:48.325Z" + }, + { + "cveId": "CVE-2026-119967", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119967", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119967.json", + "dateUpdated": "2026-11-10T18:23:48.950Z" + }, + { + "cveId": "CVE-2026-119969", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119969", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119969.json", + "dateUpdated": "2026-11-10T18:23:49.539Z" + }, + { + "cveId": "CVE-2026-119970", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119970", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119970.json", + "dateUpdated": "2026-11-10T18:23:49.995Z" + }, + { + "cveId": "CVE-2026-119971", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119971", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119971.json", + "dateUpdated": "2026-11-10T18:23:50.516Z" + }, + { + "cveId": "CVE-2026-119972", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119972", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119972.json", + "dateUpdated": "2026-11-10T18:23:50.986Z" + }, + { + "cveId": "CVE-2026-119974", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119974", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119974.json", + "dateUpdated": "2026-11-10T18:23:51.448Z" + }, + { + "cveId": "CVE-2026-119983", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119983", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119983.json", + "dateUpdated": "2026-11-10T18:23:53.381Z" + }, + { + "cveId": "CVE-2026-119988", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119988", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119988.json", + "dateUpdated": "2026-11-10T18:23:51.976Z" + }, + { + "cveId": "CVE-2026-119989", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119989", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119989.json", + "dateUpdated": "2026-11-10T18:23:52.420Z" + }, + { + "cveId": "CVE-2026-119993", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119993", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119993.json", + "dateUpdated": "2026-11-10T18:25:06.709Z" + }, + { + "cveId": "CVE-2026-119995", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119995", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119995.json", + "dateUpdated": "2026-11-10T18:25:07.231Z" + }, + { + "cveId": "CVE-2026-119996", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119996", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119996.json", + "dateUpdated": "2026-11-10T18:25:07.814Z" + }, + { + "cveId": "CVE-2026-119997", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119997", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119997.json", + "dateUpdated": "2026-11-10T18:25:08.256Z" + }, + { + "cveId": "CVE-2026-119998", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119998", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119998.json", + "dateUpdated": "2026-11-10T18:25:08.761Z" + }, + { + "cveId": "CVE-2026-119999", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119999", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119999.json", + "dateUpdated": "2026-11-10T18:25:09.373Z" + }, + { + "cveId": "CVE-2026-120000", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120000", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120000.json", + "dateUpdated": "2026-11-10T18:25:09.875Z" + }, + { + "cveId": "CVE-2026-120001", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120001", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120001.json", + "dateUpdated": "2026-11-10T18:25:10.436Z" + }, + { + "cveId": "CVE-2026-120002", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120002", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120002.json", + "dateUpdated": "2026-11-10T18:25:10.949Z" + }, + { + "cveId": "CVE-2026-120003", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120003", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120003.json", + "dateUpdated": "2026-11-10T18:25:11.542Z" + }, + { + "cveId": "CVE-2026-120778", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120778", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120778.json", + "dateUpdated": "2026-11-10T18:23:52.929Z" + }, + { + "cveId": "CVE-2026-120796", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120796", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120796.json", + "dateUpdated": "2026-11-10T18:23:53.968Z" + }, + { + "cveId": "CVE-2026-121660", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121660", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121660.json", + "dateUpdated": "2026-11-10T18:23:54.479Z" + }, + { + "cveId": "CVE-2026-121661", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121661", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121661.json", + "dateUpdated": "2026-11-10T18:23:54.932Z" + }, + { + "cveId": "CVE-2026-121662", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121662", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121662.json", + "dateUpdated": "2026-11-10T18:23:55.463Z" + }, + { + "cveId": "CVE-2026-121663", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121663", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121663.json", + "dateUpdated": "2026-11-10T18:23:55.977Z" + }, + { + "cveId": "CVE-2026-121664", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121664", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121664.json", + "dateUpdated": "2026-11-10T18:23:56.584Z" + }, + { + "cveId": "CVE-2026-121669", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121669", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121669.json", + "dateUpdated": "2026-11-10T18:23:57.099Z" + }, + { + "cveId": "CVE-2026-121670", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121670", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121670.json", + "dateUpdated": "2026-11-10T18:23:57.697Z" + }, + { + "cveId": "CVE-2026-121671", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121671", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121671.json", + "dateUpdated": "2026-11-10T18:23:58.306Z" + }, + { + "cveId": "CVE-2026-121673", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121673", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121673.json", + "dateUpdated": "2026-11-10T18:23:58.746Z" + }, + { + "cveId": "CVE-2026-121674", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121674", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121674.json", + "dateUpdated": "2026-11-10T18:23:59.253Z" + }, + { + "cveId": "CVE-2026-121675", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121675", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121675.json", + "dateUpdated": "2026-11-10T18:23:59.769Z" + }, + { + "cveId": "CVE-2026-121677", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121677", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121677.json", + "dateUpdated": "2026-11-10T18:24:00.215Z" + }, + { + "cveId": "CVE-2026-121678", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121678", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121678.json", + "dateUpdated": "2026-11-10T18:24:00.816Z" + }, + { + "cveId": "CVE-2026-121680", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121680", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121680.json", + "dateUpdated": "2026-11-10T18:24:01.333Z" + }, + { + "cveId": "CVE-2026-121681", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121681", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121681.json", + "dateUpdated": "2026-11-10T18:24:01.860Z" + }, + { + "cveId": "CVE-2026-122162", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122162", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122162.json", + "dateUpdated": "2026-11-10T18:24:02.386Z" + }, + { + "cveId": "CVE-2026-122163", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122163", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122163.json", + "dateUpdated": "2026-11-10T18:24:02.911Z" + }, + { + "cveId": "CVE-2026-122164", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122164", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122164.json", + "dateUpdated": "2026-11-10T18:24:03.492Z" + }, + { + "cveId": "CVE-2026-122165", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122165", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122165.json", + "dateUpdated": "2026-11-10T18:24:04.043Z" + }, + { + "cveId": "CVE-2026-122166", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122166", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122166.json", + "dateUpdated": "2026-11-10T18:24:04.583Z" + }, + { + "cveId": "CVE-2026-122167", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122167", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122167.json", + "dateUpdated": "2026-11-10T18:24:05.039Z" + }, + { + "cveId": "CVE-2026-122168", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122168", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122168.json", + "dateUpdated": "2026-11-10T18:24:05.590Z" + }, + { + "cveId": "CVE-2026-122169", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122169", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122169.json", + "dateUpdated": "2026-11-10T18:24:06.041Z" + }, + { + "cveId": "CVE-2026-122170", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122170", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122170.json", + "dateUpdated": "2026-11-10T18:24:06.627Z" + }, + { + "cveId": "CVE-2026-122171", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122171", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122171.json", + "dateUpdated": "2026-11-10T18:24:07.351Z" + }, + { + "cveId": "CVE-2026-122172", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122172", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122172.json", + "dateUpdated": "2026-11-10T18:24:07.959Z" + }, + { + "cveId": "CVE-2026-122173", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122173", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122173.json", + "dateUpdated": "2026-11-10T18:24:08.570Z" + }, + { + "cveId": "CVE-2026-122174", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122174", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122174.json", + "dateUpdated": "2026-11-10T18:24:09.239Z" + }, + { + "cveId": "CVE-2026-122175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122175.json", + "dateUpdated": "2026-11-10T18:24:09.797Z" + }, + { + "cveId": "CVE-2026-122176", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122176", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122176.json", + "dateUpdated": "2026-11-10T18:24:10.384Z" + }, + { + "cveId": "CVE-2026-122177", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122177", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122177.json", + "dateUpdated": "2026-11-10T18:24:10.890Z" + }, + { + "cveId": "CVE-2026-122179", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122179", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122179.json", + "dateUpdated": "2026-11-10T18:24:11.475Z" + }, + { + "cveId": "CVE-2026-122182", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122182", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122182.json", + "dateUpdated": "2026-11-10T18:24:11.942Z" + }, + { + "cveId": "CVE-2026-122183", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122183", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122183.json", + "dateUpdated": "2026-11-10T18:24:12.437Z" + }, + { + "cveId": "CVE-2026-122297", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122297", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122297.json", + "dateUpdated": "2026-11-10T18:24:12.934Z" + }, + { + "cveId": "CVE-2026-122474", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122474", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122474.json", + "dateUpdated": "2026-11-10T18:24:13.472Z" + }, + { + "cveId": "CVE-2026-122475", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122475", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122475.json", + "dateUpdated": "2026-11-10T18:24:14.109Z" + } + ], + "updated": [ + { + "cveId": "CVE-2020-9709", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2020-9709", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/9xxx/CVE-2020-9709.json", + "dateUpdated": "2026-11-10T18:26:48.063Z" + }, + { + "cveId": "CVE-2026-84473", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84473", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84473.json", + "dateUpdated": "2026-11-10T18:24:26.976Z" + }, + { + "cveId": "CVE-2026-90975", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-90975", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/90xxx/CVE-2026-90975.json", + "dateUpdated": "2026-11-10T18:23:05.208Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T18:22:35.627Z", + "numberOfChanges": 771, + "new": [ + { + "cveId": "CVE-2026-102219", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102219", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102219.json", + "dateUpdated": "2026-11-10T18:20:04.961Z" + }, + { + "cveId": "CVE-2026-102230", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102230", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102230.json", + "dateUpdated": "2026-11-10T18:19:21.754Z" + }, + { + "cveId": "CVE-2026-103571", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-103571", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/103xxx/CVE-2026-103571.json", + "dateUpdated": "2026-11-10T18:20:00.083Z" + }, + { + "cveId": "CVE-2026-105017", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105017", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105017.json", + "dateUpdated": "2026-11-10T18:19:22.258Z" + }, + { + "cveId": "CVE-2026-105018", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105018", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105018.json", + "dateUpdated": "2026-11-10T18:19:22.850Z" + }, + { + "cveId": "CVE-2026-105020", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105020", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105020.json", + "dateUpdated": "2026-11-10T18:19:23.366Z" + }, + { + "cveId": "CVE-2026-105021", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105021", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105021.json", + "dateUpdated": "2026-11-10T18:19:23.810Z" + }, + { + "cveId": "CVE-2026-105022", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105022", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105022.json", + "dateUpdated": "2026-11-10T18:19:24.412Z" + }, + { + "cveId": "CVE-2026-105023", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105023", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105023.json", + "dateUpdated": "2026-11-10T18:19:24.931Z" + }, + { + "cveId": "CVE-2026-105024", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105024", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105024.json", + "dateUpdated": "2026-11-10T18:19:25.441Z" + }, + { + "cveId": "CVE-2026-105025", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105025", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105025.json", + "dateUpdated": "2026-11-10T18:19:25.966Z" + }, + { + "cveId": "CVE-2026-105026", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105026", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105026.json", + "dateUpdated": "2026-11-10T18:19:26.411Z" + }, + { + "cveId": "CVE-2026-105028", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105028", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105028.json", + "dateUpdated": "2026-11-10T18:19:26.942Z" + }, + { + "cveId": "CVE-2026-105490", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105490", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105490.json", + "dateUpdated": "2026-11-10T18:19:27.539Z" + }, + { + "cveId": "CVE-2026-105491", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105491", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105491.json", + "dateUpdated": "2026-11-10T18:19:28.064Z" + }, + { + "cveId": "CVE-2026-105492", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105492", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105492.json", + "dateUpdated": "2026-11-10T18:19:28.577Z" + }, + { + "cveId": "CVE-2026-105493", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105493", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105493.json", + "dateUpdated": "2026-11-10T18:19:29.018Z" + }, + { + "cveId": "CVE-2026-105494", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105494", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105494.json", + "dateUpdated": "2026-11-10T18:21:37.970Z" + }, + { + "cveId": "CVE-2026-105495", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105495", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105495.json", + "dateUpdated": "2026-11-10T18:19:29.624Z" + }, + { + "cveId": "CVE-2026-105496", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105496", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105496.json", + "dateUpdated": "2026-11-10T18:19:30.219Z" + }, + { + "cveId": "CVE-2026-105497", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105497", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105497.json", + "dateUpdated": "2026-11-10T18:19:30.819Z" + }, + { + "cveId": "CVE-2026-105498", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105498", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105498.json", + "dateUpdated": "2026-11-10T18:19:31.329Z" + }, + { + "cveId": "CVE-2026-105499", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105499", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105499.json", + "dateUpdated": "2026-11-10T18:19:31.771Z" + }, + { + "cveId": "CVE-2026-105501", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105501", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105501.json", + "dateUpdated": "2026-11-10T18:19:32.293Z" + }, + { + "cveId": "CVE-2026-105503", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105503", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105503.json", + "dateUpdated": "2026-11-10T18:19:32.806Z" + }, + { + "cveId": "CVE-2026-105504", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105504", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105504.json", + "dateUpdated": "2026-11-10T18:19:33.334Z" + }, + { + "cveId": "CVE-2026-105505", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105505", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105505.json", + "dateUpdated": "2026-11-10T18:19:33.794Z" + }, + { + "cveId": "CVE-2026-105506", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105506", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105506.json", + "dateUpdated": "2026-11-10T18:19:34.298Z" + }, + { + "cveId": "CVE-2026-105507", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105507", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105507.json", + "dateUpdated": "2026-11-10T18:19:34.874Z" + }, + { + "cveId": "CVE-2026-105509", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105509", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105509.json", + "dateUpdated": "2026-11-10T18:18:58.524Z" + }, + { + "cveId": "CVE-2026-105510", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105510", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105510.json", + "dateUpdated": "2026-11-10T18:19:35.477Z" + }, + { + "cveId": "CVE-2026-105511", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105511", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105511.json", + "dateUpdated": "2026-11-10T18:18:59.082Z" + }, + { + "cveId": "CVE-2026-105512", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105512", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105512.json", + "dateUpdated": "2026-11-10T18:19:36.084Z" + }, + { + "cveId": "CVE-2026-105513", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105513", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105513.json", + "dateUpdated": "2026-11-10T18:19:36.663Z" + }, + { + "cveId": "CVE-2026-105515", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105515", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105515.json", + "dateUpdated": "2026-11-10T18:19:37.243Z" + }, + { + "cveId": "CVE-2026-105518", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105518", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105518.json", + "dateUpdated": "2026-11-10T18:19:37.748Z" + }, + { + "cveId": "CVE-2026-105520", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105520", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105520.json", + "dateUpdated": "2026-11-10T18:19:38.252Z" + }, + { + "cveId": "CVE-2026-105522", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105522", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105522.json", + "dateUpdated": "2026-11-10T18:19:38.768Z" + }, + { + "cveId": "CVE-2026-105524", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105524", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105524.json", + "dateUpdated": "2026-11-10T18:19:39.355Z" + }, + { + "cveId": "CVE-2026-105525", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105525", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105525.json", + "dateUpdated": "2026-11-10T18:19:39.864Z" + }, + { + "cveId": "CVE-2026-105526", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105526", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105526.json", + "dateUpdated": "2026-11-10T18:19:40.450Z" + }, + { + "cveId": "CVE-2026-105527", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105527", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105527.json", + "dateUpdated": "2026-11-10T18:19:41.218Z" + }, + { + "cveId": "CVE-2026-105528", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105528", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105528.json", + "dateUpdated": "2026-11-10T18:19:41.758Z" + }, + { + "cveId": "CVE-2026-105529", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105529", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105529.json", + "dateUpdated": "2026-11-10T18:19:42.355Z" + }, + { + "cveId": "CVE-2026-105530", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105530", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105530.json", + "dateUpdated": "2026-11-10T18:19:42.956Z" + }, + { + "cveId": "CVE-2026-105531", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105531", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105531.json", + "dateUpdated": "2026-11-10T18:19:43.535Z" + }, + { + "cveId": "CVE-2026-105532", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105532", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105532.json", + "dateUpdated": "2026-11-10T18:19:44.045Z" + }, + { + "cveId": "CVE-2026-105533", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105533", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105533.json", + "dateUpdated": "2026-11-10T18:19:44.530Z" + }, + { + "cveId": "CVE-2026-105534", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105534", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105534.json", + "dateUpdated": "2026-11-10T18:18:59.680Z" + }, + { + "cveId": "CVE-2026-105537", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105537", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105537.json", + "dateUpdated": "2026-11-10T18:19:45.102Z" + }, + { + "cveId": "CVE-2026-105540", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105540", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105540.json", + "dateUpdated": "2026-11-10T18:19:45.645Z" + }, + { + "cveId": "CVE-2026-105541", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105541", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105541.json", + "dateUpdated": "2026-11-10T18:19:46.164Z" + }, + { + "cveId": "CVE-2026-105542", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105542", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105542.json", + "dateUpdated": "2026-11-10T18:19:46.607Z" + }, + { + "cveId": "CVE-2026-105543", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105543", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105543.json", + "dateUpdated": "2026-11-10T18:19:47.116Z" + }, + { + "cveId": "CVE-2026-105545", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105545", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105545.json", + "dateUpdated": "2026-11-10T18:19:47.637Z" + }, + { + "cveId": "CVE-2026-105546", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105546", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105546.json", + "dateUpdated": "2026-11-10T18:19:48.144Z" + }, + { + "cveId": "CVE-2026-105547", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105547", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105547.json", + "dateUpdated": "2026-11-10T18:19:48.584Z" + }, + { + "cveId": "CVE-2026-105549", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105549", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105549.json", + "dateUpdated": "2026-11-10T18:19:49.104Z" + }, + { + "cveId": "CVE-2026-105551", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105551", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105551.json", + "dateUpdated": "2026-11-10T18:19:49.548Z" + }, + { + "cveId": "CVE-2026-105552", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105552", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105552.json", + "dateUpdated": "2026-11-10T18:19:49.984Z" + }, + { + "cveId": "CVE-2026-105553", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105553", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105553.json", + "dateUpdated": "2026-11-10T18:19:50.586Z" + }, + { + "cveId": "CVE-2026-105554", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105554", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105554.json", + "dateUpdated": "2026-11-10T18:19:00.258Z" + }, + { + "cveId": "CVE-2026-105557", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105557", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105557.json", + "dateUpdated": "2026-11-10T18:19:51.165Z" + }, + { + "cveId": "CVE-2026-105558", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105558", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105558.json", + "dateUpdated": "2026-11-10T18:19:51.742Z" + }, + { + "cveId": "CVE-2026-105559", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105559", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105559.json", + "dateUpdated": "2026-11-10T18:19:52.346Z" + }, + { + "cveId": "CVE-2026-105560", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105560", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105560.json", + "dateUpdated": "2026-11-10T18:19:52.936Z" + }, + { + "cveId": "CVE-2026-105561", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105561", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105561.json", + "dateUpdated": "2026-11-10T18:19:01.597Z" + }, + { + "cveId": "CVE-2026-105562", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105562", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105562.json", + "dateUpdated": "2026-11-10T18:19:02.359Z" + }, + { + "cveId": "CVE-2026-105565", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105565", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105565.json", + "dateUpdated": "2026-11-10T18:19:53.390Z" + }, + { + "cveId": "CVE-2026-105566", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105566", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105566.json", + "dateUpdated": "2026-11-10T18:19:53.909Z" + }, + { + "cveId": "CVE-2026-105567", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105567", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105567.json", + "dateUpdated": "2026-11-10T18:18:08.993Z" + }, + { + "cveId": "CVE-2026-105568", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105568", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105568.json", + "dateUpdated": "2026-11-10T18:19:03.080Z" + }, + { + "cveId": "CVE-2026-105569", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105569", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105569.json", + "dateUpdated": "2026-11-10T18:19:54.343Z" + }, + { + "cveId": "CVE-2026-105574", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105574", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105574.json", + "dateUpdated": "2026-11-10T18:19:54.858Z" + }, + { + "cveId": "CVE-2026-105575", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105575", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105575.json", + "dateUpdated": "2026-11-10T18:19:55.433Z" + }, + { + "cveId": "CVE-2026-105578", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105578", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105578.json", + "dateUpdated": "2026-11-10T18:19:55.960Z" + }, + { + "cveId": "CVE-2026-105579", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105579", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105579.json", + "dateUpdated": "2026-11-10T18:19:56.422Z" + }, + { + "cveId": "CVE-2026-105580", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105580", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105580.json", + "dateUpdated": "2026-11-10T18:19:56.952Z" + }, + { + "cveId": "CVE-2026-105581", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105581", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105581.json", + "dateUpdated": "2026-11-10T18:19:57.475Z" + }, + { + "cveId": "CVE-2026-108401", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108401", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108401.json", + "dateUpdated": "2026-11-10T18:19:03.622Z" + }, + { + "cveId": "CVE-2026-108404", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108404", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108404.json", + "dateUpdated": "2026-11-10T18:20:05.515Z" + }, + { + "cveId": "CVE-2026-108405", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108405", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108405.json", + "dateUpdated": "2026-11-10T18:20:01.730Z" + }, + { + "cveId": "CVE-2026-108406", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108406", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108406.json", + "dateUpdated": "2026-11-10T18:19:19.653Z" + }, + { + "cveId": "CVE-2026-108407", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108407", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108407.json", + "dateUpdated": "2026-11-10T18:20:02.175Z" + }, + { + "cveId": "CVE-2026-108408", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108408", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108408.json", + "dateUpdated": "2026-11-10T18:19:20.112Z" + }, + { + "cveId": "CVE-2026-108410", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108410", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108410.json", + "dateUpdated": "2026-11-10T18:19:20.660Z" + }, + { + "cveId": "CVE-2026-108412", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108412", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108412.json", + "dateUpdated": "2026-11-10T18:19:58.064Z" + }, + { + "cveId": "CVE-2026-108413", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108413", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108413.json", + "dateUpdated": "2026-11-10T18:19:58.521Z" + }, + { + "cveId": "CVE-2026-108421", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108421", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108421.json", + "dateUpdated": "2026-11-10T18:19:21.248Z" + }, + { + "cveId": "CVE-2026-108423", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108423", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108423.json", + "dateUpdated": "2026-11-10T18:20:06.054Z" + }, + { + "cveId": "CVE-2026-108425", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108425", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108425.json", + "dateUpdated": "2026-11-10T18:15:35.342Z" + }, + { + "cveId": "CVE-2026-108469", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108469", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108469.json", + "dateUpdated": "2026-11-10T18:20:00.636Z" + }, + { + "cveId": "CVE-2026-108470", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108470", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108470.json", + "dateUpdated": "2026-11-10T18:20:01.190Z" + }, + { + "cveId": "CVE-2026-109456", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109456", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109456.json", + "dateUpdated": "2026-11-10T18:15:30.738Z" + }, + { + "cveId": "CVE-2026-109457", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109457", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109457.json", + "dateUpdated": "2026-11-10T18:15:31.256Z" + }, + { + "cveId": "CVE-2026-109459", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109459", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109459.json", + "dateUpdated": "2026-11-10T18:20:06.616Z" + }, + { + "cveId": "CVE-2026-109460", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109460", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109460.json", + "dateUpdated": "2026-11-10T18:15:31.782Z" + }, + { + "cveId": "CVE-2026-109464", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109464", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109464.json", + "dateUpdated": "2026-11-10T18:15:32.288Z" + }, + { + "cveId": "CVE-2026-109466", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109466", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109466.json", + "dateUpdated": "2026-11-10T18:15:32.726Z" + }, + { + "cveId": "CVE-2026-109472", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109472", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109472.json", + "dateUpdated": "2026-11-10T18:15:33.235Z" + }, + { + "cveId": "CVE-2026-109473", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109473", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109473.json", + "dateUpdated": "2026-11-10T18:19:59.039Z" + }, + { + "cveId": "CVE-2026-109481", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109481", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109481.json", + "dateUpdated": "2026-11-10T18:15:33.744Z" + }, + { + "cveId": "CVE-2026-109485", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109485", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109485.json", + "dateUpdated": "2026-11-10T18:15:35.800Z" + }, + { + "cveId": "CVE-2026-109487", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109487", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109487.json", + "dateUpdated": "2026-11-10T18:15:36.317Z" + }, + { + "cveId": "CVE-2026-109491", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109491", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109491.json", + "dateUpdated": "2026-11-10T18:15:34.290Z" + }, + { + "cveId": "CVE-2026-109492", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109492", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109492.json", + "dateUpdated": "2026-11-10T18:15:34.812Z" + }, + { + "cveId": "CVE-2026-109493", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109493", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109493.json", + "dateUpdated": "2026-11-10T18:20:45.750Z" + }, + { + "cveId": "CVE-2026-109494", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109494", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109494.json", + "dateUpdated": "2026-11-10T18:20:47.547Z" + }, + { + "cveId": "CVE-2026-109495", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109495", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109495.json", + "dateUpdated": "2026-11-10T18:20:48.178Z" + }, + { + "cveId": "CVE-2026-109496", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109496", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109496.json", + "dateUpdated": "2026-11-10T18:20:48.734Z" + }, + { + "cveId": "CVE-2026-109497", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109497", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109497.json", + "dateUpdated": "2026-11-10T18:20:49.258Z" + }, + { + "cveId": "CVE-2026-109498", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109498", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109498.json", + "dateUpdated": "2026-11-10T18:20:49.842Z" + }, + { + "cveId": "CVE-2026-109499", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109499", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109499.json", + "dateUpdated": "2026-11-10T18:20:50.290Z" + }, + { + "cveId": "CVE-2026-109500", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109500", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109500.json", + "dateUpdated": "2026-11-10T18:20:50.806Z" + }, + { + "cveId": "CVE-2026-109501", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109501", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109501.json", + "dateUpdated": "2026-11-10T18:20:51.318Z" + }, + { + "cveId": "CVE-2026-109502", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109502", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109502.json", + "dateUpdated": "2026-11-10T18:20:51.828Z" + }, + { + "cveId": "CVE-2026-109503", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109503", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109503.json", + "dateUpdated": "2026-11-10T18:20:52.265Z" + }, + { + "cveId": "CVE-2026-109504", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109504", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109504.json", + "dateUpdated": "2026-11-10T18:20:52.773Z" + }, + { + "cveId": "CVE-2026-109505", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109505", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109505.json", + "dateUpdated": "2026-11-10T18:20:53.357Z" + }, + { + "cveId": "CVE-2026-110043", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110043", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110043.json", + "dateUpdated": "2026-11-10T18:20:53.886Z" + }, + { + "cveId": "CVE-2026-110044", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110044", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110044.json", + "dateUpdated": "2026-11-10T18:20:54.336Z" + }, + { + "cveId": "CVE-2026-110045", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110045", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110045.json", + "dateUpdated": "2026-11-10T18:20:54.849Z" + }, + { + "cveId": "CVE-2026-110046", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110046", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110046.json", + "dateUpdated": "2026-11-10T18:20:55.447Z" + }, + { + "cveId": "CVE-2026-110047", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110047", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110047.json", + "dateUpdated": "2026-11-10T18:20:55.977Z" + }, + { + "cveId": "CVE-2026-110048", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110048", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110048.json", + "dateUpdated": "2026-11-10T18:20:56.428Z" + }, + { + "cveId": "CVE-2026-110049", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110049", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110049.json", + "dateUpdated": "2026-11-10T18:20:56.954Z" + }, + { + "cveId": "CVE-2026-110050", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110050", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110050.json", + "dateUpdated": "2026-11-10T18:20:57.561Z" + }, + { + "cveId": "CVE-2026-110051", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110051", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110051.json", + "dateUpdated": "2026-11-10T18:20:58.084Z" + }, + { + "cveId": "CVE-2026-110052", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110052", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110052.json", + "dateUpdated": "2026-11-10T18:20:58.587Z" + }, + { + "cveId": "CVE-2026-110053", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110053", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110053.json", + "dateUpdated": "2026-11-10T18:20:59.049Z" + }, + { + "cveId": "CVE-2026-110054", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110054", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110054.json", + "dateUpdated": "2026-11-10T18:20:59.563Z" + }, + { + "cveId": "CVE-2026-110055", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110055", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110055.json", + "dateUpdated": "2026-11-10T18:21:00.091Z" + }, + { + "cveId": "CVE-2026-110056", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110056", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110056.json", + "dateUpdated": "2026-11-10T18:21:00.664Z" + }, + { + "cveId": "CVE-2026-110057", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110057", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110057.json", + "dateUpdated": "2026-11-10T18:21:01.260Z" + }, + { + "cveId": "CVE-2026-110058", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110058", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110058.json", + "dateUpdated": "2026-11-10T18:21:01.770Z" + }, + { + "cveId": "CVE-2026-110059", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110059", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110059.json", + "dateUpdated": "2026-11-10T18:21:02.205Z" + }, + { + "cveId": "CVE-2026-110060", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110060", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110060.json", + "dateUpdated": "2026-11-10T18:21:02.755Z" + }, + { + "cveId": "CVE-2026-110061", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110061", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110061.json", + "dateUpdated": "2026-11-10T18:21:03.338Z" + }, + { + "cveId": "CVE-2026-110062", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110062", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110062.json", + "dateUpdated": "2026-11-10T18:21:03.880Z" + }, + { + "cveId": "CVE-2026-110064", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110064", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110064.json", + "dateUpdated": "2026-11-10T18:21:04.466Z" + }, + { + "cveId": "CVE-2026-110065", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110065", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110065.json", + "dateUpdated": "2026-11-10T18:21:04.971Z" + }, + { + "cveId": "CVE-2026-110066", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110066", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110066.json", + "dateUpdated": "2026-11-10T18:21:05.567Z" + }, + { + "cveId": "CVE-2026-110067", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110067", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110067.json", + "dateUpdated": "2026-11-10T18:21:06.103Z" + }, + { + "cveId": "CVE-2026-110068", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-110068", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110068.json", + "dateUpdated": "2026-11-10T18:21:06.720Z" + }, + { + "cveId": "CVE-2026-111285", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111285", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111285.json", + "dateUpdated": "2026-11-10T18:21:07.281Z" + }, + { + "cveId": "CVE-2026-111286", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111286", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111286.json", + "dateUpdated": "2026-11-10T18:21:07.894Z" + }, + { + "cveId": "CVE-2026-111287", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111287", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111287.json", + "dateUpdated": "2026-11-10T18:21:08.567Z" + }, + { + "cveId": "CVE-2026-111288", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111288", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111288.json", + "dateUpdated": "2026-11-10T18:21:09.203Z" + }, + { + "cveId": "CVE-2026-111289", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111289", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111289.json", + "dateUpdated": "2026-11-10T18:21:09.778Z" + }, + { + "cveId": "CVE-2026-111290", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111290", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111290.json", + "dateUpdated": "2026-11-10T18:21:10.299Z" + }, + { + "cveId": "CVE-2026-111291", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111291", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111291.json", + "dateUpdated": "2026-11-10T18:21:10.815Z" + }, + { + "cveId": "CVE-2026-111292", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111292", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111292.json", + "dateUpdated": "2026-11-10T18:21:11.332Z" + }, + { + "cveId": "CVE-2026-111293", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111293", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111293.json", + "dateUpdated": "2026-11-10T18:21:11.991Z" + }, + { + "cveId": "CVE-2026-111294", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111294", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111294.json", + "dateUpdated": "2026-11-10T18:21:12.439Z" + }, + { + "cveId": "CVE-2026-111295", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111295", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111295.json", + "dateUpdated": "2026-11-10T18:21:13.055Z" + }, + { + "cveId": "CVE-2026-111296", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111296", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111296.json", + "dateUpdated": "2026-11-10T18:21:13.637Z" + }, + { + "cveId": "CVE-2026-111297", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111297", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111297.json", + "dateUpdated": "2026-11-10T18:21:14.183Z" + }, + { + "cveId": "CVE-2026-111298", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111298", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111298.json", + "dateUpdated": "2026-11-10T18:21:16.893Z" + }, + { + "cveId": "CVE-2026-111299", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111299", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111299.json", + "dateUpdated": "2026-11-10T18:21:17.486Z" + }, + { + "cveId": "CVE-2026-111300", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111300", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111300.json", + "dateUpdated": "2026-11-10T18:21:18.094Z" + }, + { + "cveId": "CVE-2026-111301", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111301", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111301.json", + "dateUpdated": "2026-11-10T18:21:18.721Z" + }, + { + "cveId": "CVE-2026-111302", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111302", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111302.json", + "dateUpdated": "2026-11-10T18:21:19.325Z" + }, + { + "cveId": "CVE-2026-111303", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111303", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111303.json", + "dateUpdated": "2026-11-10T18:21:19.793Z" + }, + { + "cveId": "CVE-2026-111304", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111304", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111304.json", + "dateUpdated": "2026-11-10T18:21:20.308Z" + }, + { + "cveId": "CVE-2026-111305", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111305", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111305.json", + "dateUpdated": "2026-11-10T18:21:20.878Z" + }, + { + "cveId": "CVE-2026-111306", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111306", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111306.json", + "dateUpdated": "2026-11-10T18:21:21.391Z" + }, + { + "cveId": "CVE-2026-111307", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111307", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111307.json", + "dateUpdated": "2026-11-10T18:21:21.929Z" + }, + { + "cveId": "CVE-2026-111308", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111308", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111308.json", + "dateUpdated": "2026-11-10T18:21:22.564Z" + }, + { + "cveId": "CVE-2026-111309", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111309", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111309.json", + "dateUpdated": "2026-11-10T18:21:23.136Z" + }, + { + "cveId": "CVE-2026-111310", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-111310", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/111xxx/CVE-2026-111310.json", + "dateUpdated": "2026-11-10T18:21:23.738Z" + }, + { + "cveId": "CVE-2026-112714", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112714", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112714.json", + "dateUpdated": "2026-11-10T18:21:24.359Z" + }, + { + "cveId": "CVE-2026-112715", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112715", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112715.json", + "dateUpdated": "2026-11-10T18:21:24.953Z" + }, + { + "cveId": "CVE-2026-112716", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112716", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112716.json", + "dateUpdated": "2026-11-10T18:21:25.543Z" + }, + { + "cveId": "CVE-2026-112717", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112717", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112717.json", + "dateUpdated": "2026-11-10T18:21:26.119Z" + }, + { + "cveId": "CVE-2026-112718", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112718", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112718.json", + "dateUpdated": "2026-11-10T18:21:26.644Z" + }, + { + "cveId": "CVE-2026-112719", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112719", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112719.json", + "dateUpdated": "2026-11-10T18:21:27.183Z" + }, + { + "cveId": "CVE-2026-112720", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112720", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112720.json", + "dateUpdated": "2026-11-10T18:21:27.704Z" + }, + { + "cveId": "CVE-2026-112721", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112721", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112721.json", + "dateUpdated": "2026-11-10T18:21:28.287Z" + }, + { + "cveId": "CVE-2026-112722", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112722", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112722.json", + "dateUpdated": "2026-11-10T18:21:28.767Z" + }, + { + "cveId": "CVE-2026-112723", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112723", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112723.json", + "dateUpdated": "2026-11-10T18:21:29.350Z" + }, + { + "cveId": "CVE-2026-112724", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112724", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112724.json", + "dateUpdated": "2026-11-10T18:21:29.786Z" + }, + { + "cveId": "CVE-2026-112726", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112726", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112726.json", + "dateUpdated": "2026-11-10T18:21:30.417Z" + }, + { + "cveId": "CVE-2026-112727", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112727", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112727.json", + "dateUpdated": "2026-11-10T18:20:44.774Z" + }, + { + "cveId": "CVE-2026-112728", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112728", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112728.json", + "dateUpdated": "2026-11-10T18:21:31.019Z" + }, + { + "cveId": "CVE-2026-112729", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112729", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112729.json", + "dateUpdated": "2026-11-10T18:21:31.561Z" + }, + { + "cveId": "CVE-2026-112730", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112730", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112730.json", + "dateUpdated": "2026-11-10T18:21:32.158Z" + }, + { + "cveId": "CVE-2026-112731", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112731", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112731.json", + "dateUpdated": "2026-11-10T18:21:32.736Z" + }, + { + "cveId": "CVE-2026-112733", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112733", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112733.json", + "dateUpdated": "2026-11-10T18:21:33.313Z" + }, + { + "cveId": "CVE-2026-112734", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112734", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112734.json", + "dateUpdated": "2026-11-10T18:21:33.821Z" + }, + { + "cveId": "CVE-2026-112735", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112735", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112735.json", + "dateUpdated": "2026-11-10T18:21:34.267Z" + }, + { + "cveId": "CVE-2026-112736", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112736", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112736.json", + "dateUpdated": "2026-11-10T18:21:34.781Z" + }, + { + "cveId": "CVE-2026-112737", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112737", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112737.json", + "dateUpdated": "2026-11-10T18:21:35.293Z" + }, + { + "cveId": "CVE-2026-112738", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112738", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112738.json", + "dateUpdated": "2026-11-10T18:21:35.798Z" + }, + { + "cveId": "CVE-2026-112739", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112739", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112739.json", + "dateUpdated": "2026-11-10T18:21:36.323Z" + }, + { + "cveId": "CVE-2026-112741", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112741", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112741.json", + "dateUpdated": "2026-11-10T18:21:36.911Z" + }, + { + "cveId": "CVE-2026-112743", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112743", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112743.json", + "dateUpdated": "2026-11-10T18:18:00.856Z" + }, + { + "cveId": "CVE-2026-112745", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112745", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112745.json", + "dateUpdated": "2026-11-10T18:21:37.448Z" + }, + { + "cveId": "CVE-2026-112750", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112750", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112750.json", + "dateUpdated": "2026-11-10T18:18:01.308Z" + }, + { + "cveId": "CVE-2026-112751", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112751", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112751.json", + "dateUpdated": "2026-11-10T18:18:01.927Z" + }, + { + "cveId": "CVE-2026-112752", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112752", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112752.json", + "dateUpdated": "2026-11-10T18:18:02.446Z" + }, + { + "cveId": "CVE-2026-112753", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112753", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112753.json", + "dateUpdated": "2026-11-10T18:18:02.967Z" + }, + { + "cveId": "CVE-2026-112754", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112754", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112754.json", + "dateUpdated": "2026-11-10T18:18:03.479Z" + }, + { + "cveId": "CVE-2026-112755", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112755", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112755.json", + "dateUpdated": "2026-11-10T18:18:04.112Z" + }, + { + "cveId": "CVE-2026-112756", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112756", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112756.json", + "dateUpdated": "2026-11-10T18:18:04.675Z" + }, + { + "cveId": "CVE-2026-112757", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112757", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112757.json", + "dateUpdated": "2026-11-10T18:18:05.191Z" + }, + { + "cveId": "CVE-2026-112758", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112758", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112758.json", + "dateUpdated": "2026-11-10T18:18:05.642Z" + }, + { + "cveId": "CVE-2026-112759", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112759", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112759.json", + "dateUpdated": "2026-11-10T18:18:06.178Z" + }, + { + "cveId": "CVE-2026-112760", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112760", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112760.json", + "dateUpdated": "2026-11-10T18:18:06.737Z" + }, + { + "cveId": "CVE-2026-112761", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112761", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112761.json", + "dateUpdated": "2026-11-10T18:18:07.358Z" + }, + { + "cveId": "CVE-2026-112762", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112762", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112762.json", + "dateUpdated": "2026-11-10T18:18:07.864Z" + }, + { + "cveId": "CVE-2026-112763", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112763", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112763.json", + "dateUpdated": "2026-11-10T18:18:08.482Z" + }, + { + "cveId": "CVE-2026-112764", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112764", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112764.json", + "dateUpdated": "2026-11-10T18:18:09.518Z" + }, + { + "cveId": "CVE-2026-112765", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112765", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112765.json", + "dateUpdated": "2026-11-10T18:18:10.061Z" + }, + { + "cveId": "CVE-2026-112766", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112766", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112766.json", + "dateUpdated": "2026-11-10T18:18:10.566Z" + }, + { + "cveId": "CVE-2026-112789", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112789", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112789.json", + "dateUpdated": "2026-11-10T18:18:11.116Z" + }, + { + "cveId": "CVE-2026-112790", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112790", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112790.json", + "dateUpdated": "2026-11-10T18:18:11.672Z" + }, + { + "cveId": "CVE-2026-112791", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112791", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112791.json", + "dateUpdated": "2026-11-10T18:18:12.120Z" + }, + { + "cveId": "CVE-2026-112792", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112792", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112792.json", + "dateUpdated": "2026-11-10T18:18:12.681Z" + }, + { + "cveId": "CVE-2026-112793", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112793", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112793.json", + "dateUpdated": "2026-11-10T18:18:13.185Z" + }, + { + "cveId": "CVE-2026-112794", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112794", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112794.json", + "dateUpdated": "2026-11-10T18:18:13.713Z" + }, + { + "cveId": "CVE-2026-112795", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112795", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112795.json", + "dateUpdated": "2026-11-10T18:18:14.292Z" + }, + { + "cveId": "CVE-2026-112796", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112796", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112796.json", + "dateUpdated": "2026-11-10T18:18:14.780Z" + }, + { + "cveId": "CVE-2026-112797", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112797", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112797.json", + "dateUpdated": "2026-11-10T18:18:15.247Z" + }, + { + "cveId": "CVE-2026-112798", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112798", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112798.json", + "dateUpdated": "2026-11-10T18:18:15.751Z" + }, + { + "cveId": "CVE-2026-112799", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112799", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112799.json", + "dateUpdated": "2026-11-10T18:18:16.192Z" + }, + { + "cveId": "CVE-2026-112800", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112800", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112800.json", + "dateUpdated": "2026-11-10T18:18:16.698Z" + }, + { + "cveId": "CVE-2026-112801", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112801", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112801.json", + "dateUpdated": "2026-11-10T18:18:17.235Z" + }, + { + "cveId": "CVE-2026-112802", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112802", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112802.json", + "dateUpdated": "2026-11-10T18:18:17.827Z" + }, + { + "cveId": "CVE-2026-112803", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112803", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112803.json", + "dateUpdated": "2026-11-10T18:18:18.307Z" + }, + { + "cveId": "CVE-2026-112804", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112804", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112804.json", + "dateUpdated": "2026-11-10T18:18:18.824Z" + }, + { + "cveId": "CVE-2026-112805", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112805", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112805.json", + "dateUpdated": "2026-11-10T18:18:19.371Z" + }, + { + "cveId": "CVE-2026-112806", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112806", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112806.json", + "dateUpdated": "2026-11-10T18:18:20.000Z" + }, + { + "cveId": "CVE-2026-112807", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112807", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112807.json", + "dateUpdated": "2026-11-10T18:18:20.562Z" + }, + { + "cveId": "CVE-2026-112808", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112808", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112808.json", + "dateUpdated": "2026-11-10T18:18:21.191Z" + }, + { + "cveId": "CVE-2026-112809", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112809", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112809.json", + "dateUpdated": "2026-11-10T18:18:21.667Z" + }, + { + "cveId": "CVE-2026-112810", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112810", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112810.json", + "dateUpdated": "2026-11-10T18:18:22.183Z" + }, + { + "cveId": "CVE-2026-112811", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112811", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112811.json", + "dateUpdated": "2026-11-10T18:18:22.758Z" + }, + { + "cveId": "CVE-2026-112812", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112812", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112812.json", + "dateUpdated": "2026-11-10T18:18:23.306Z" + }, + { + "cveId": "CVE-2026-112813", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112813", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112813.json", + "dateUpdated": "2026-11-10T18:18:23.843Z" + }, + { + "cveId": "CVE-2026-112814", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112814", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112814.json", + "dateUpdated": "2026-11-10T18:18:24.367Z" + }, + { + "cveId": "CVE-2026-112965", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112965", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112965.json", + "dateUpdated": "2026-11-10T18:18:24.958Z" + }, + { + "cveId": "CVE-2026-112966", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112966", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112966.json", + "dateUpdated": "2026-11-10T18:18:25.552Z" + }, + { + "cveId": "CVE-2026-112967", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112967", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112967.json", + "dateUpdated": "2026-11-10T18:18:26.069Z" + }, + { + "cveId": "CVE-2026-112968", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112968", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112968.json", + "dateUpdated": "2026-11-10T18:18:26.586Z" + }, + { + "cveId": "CVE-2026-112969", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112969", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112969.json", + "dateUpdated": "2026-11-10T18:18:27.107Z" + }, + { + "cveId": "CVE-2026-112970", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112970", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112970.json", + "dateUpdated": "2026-11-10T18:18:27.618Z" + }, + { + "cveId": "CVE-2026-112971", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112971", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112971.json", + "dateUpdated": "2026-11-10T18:18:28.134Z" + }, + { + "cveId": "CVE-2026-112972", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112972", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112972.json", + "dateUpdated": "2026-11-10T18:18:28.646Z" + }, + { + "cveId": "CVE-2026-112973", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112973", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112973.json", + "dateUpdated": "2026-11-10T18:18:29.246Z" + }, + { + "cveId": "CVE-2026-112974", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112974", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112974.json", + "dateUpdated": "2026-11-10T18:18:29.775Z" + }, + { + "cveId": "CVE-2026-112975", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112975", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112975.json", + "dateUpdated": "2026-11-10T18:18:30.407Z" + }, + { + "cveId": "CVE-2026-112976", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112976", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112976.json", + "dateUpdated": "2026-11-10T18:18:31.047Z" + }, + { + "cveId": "CVE-2026-112977", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112977", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112977.json", + "dateUpdated": "2026-11-10T18:18:31.607Z" + }, + { + "cveId": "CVE-2026-112978", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112978", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112978.json", + "dateUpdated": "2026-11-10T18:18:32.173Z" + }, + { + "cveId": "CVE-2026-112979", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112979", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112979.json", + "dateUpdated": "2026-11-10T18:18:32.789Z" + }, + { + "cveId": "CVE-2026-112980", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112980", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112980.json", + "dateUpdated": "2026-11-10T18:18:33.304Z" + }, + { + "cveId": "CVE-2026-112981", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112981", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112981.json", + "dateUpdated": "2026-11-10T18:18:33.814Z" + }, + { + "cveId": "CVE-2026-112982", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112982", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112982.json", + "dateUpdated": "2026-11-10T18:18:34.325Z" + }, + { + "cveId": "CVE-2026-112984", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112984", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112984.json", + "dateUpdated": "2026-11-10T18:18:34.944Z" + }, + { + "cveId": "CVE-2026-112985", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112985", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112985.json", + "dateUpdated": "2026-11-10T18:18:35.542Z" + }, + { + "cveId": "CVE-2026-112986", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112986", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112986.json", + "dateUpdated": "2026-11-10T18:18:35.977Z" + }, + { + "cveId": "CVE-2026-112987", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112987", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112987.json", + "dateUpdated": "2026-11-10T18:18:36.584Z" + }, + { + "cveId": "CVE-2026-112988", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112988", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112988.json", + "dateUpdated": "2026-11-10T18:18:37.175Z" + }, + { + "cveId": "CVE-2026-112989", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112989", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112989.json", + "dateUpdated": "2026-11-10T18:18:37.757Z" + }, + { + "cveId": "CVE-2026-112990", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-112990", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/112xxx/CVE-2026-112990.json", + "dateUpdated": "2026-11-10T18:18:38.264Z" + }, + { + "cveId": "CVE-2026-113748", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113748", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113748.json", + "dateUpdated": "2026-11-10T18:18:38.769Z" + }, + { + "cveId": "CVE-2026-113749", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113749", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113749.json", + "dateUpdated": "2026-11-10T18:18:39.355Z" + }, + { + "cveId": "CVE-2026-113750", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113750", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113750.json", + "dateUpdated": "2026-11-10T18:18:40.998Z" + }, + { + "cveId": "CVE-2026-113751", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113751", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113751.json", + "dateUpdated": "2026-11-10T18:18:41.513Z" + }, + { + "cveId": "CVE-2026-113752", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113752", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113752.json", + "dateUpdated": "2026-11-10T18:18:42.037Z" + }, + { + "cveId": "CVE-2026-113753", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113753", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113753.json", + "dateUpdated": "2026-11-10T18:18:42.635Z" + }, + { + "cveId": "CVE-2026-113754", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113754", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113754.json", + "dateUpdated": "2026-11-10T18:18:43.167Z" + }, + { + "cveId": "CVE-2026-113755", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113755", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113755.json", + "dateUpdated": "2026-11-10T18:18:43.626Z" + }, + { + "cveId": "CVE-2026-113756", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113756", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113756.json", + "dateUpdated": "2026-11-10T18:18:44.149Z" + }, + { + "cveId": "CVE-2026-113757", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113757", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113757.json", + "dateUpdated": "2026-11-10T18:18:44.673Z" + }, + { + "cveId": "CVE-2026-113758", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113758", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113758.json", + "dateUpdated": "2026-11-10T18:18:45.177Z" + }, + { + "cveId": "CVE-2026-113759", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113759", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113759.json", + "dateUpdated": "2026-11-10T18:17:59.137Z" + }, + { + "cveId": "CVE-2026-113760", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113760", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113760.json", + "dateUpdated": "2026-11-10T18:18:45.697Z" + }, + { + "cveId": "CVE-2026-113761", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113761", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113761.json", + "dateUpdated": "2026-11-10T18:18:46.284Z" + }, + { + "cveId": "CVE-2026-113762", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113762", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113762.json", + "dateUpdated": "2026-11-10T18:18:46.835Z" + }, + { + "cveId": "CVE-2026-113763", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113763", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113763.json", + "dateUpdated": "2026-11-10T18:18:47.352Z" + }, + { + "cveId": "CVE-2026-113764", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113764", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113764.json", + "dateUpdated": "2026-11-10T18:18:47.959Z" + }, + { + "cveId": "CVE-2026-113765", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113765", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113765.json", + "dateUpdated": "2026-11-10T18:18:48.508Z" + }, + { + "cveId": "CVE-2026-113766", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113766", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113766.json", + "dateUpdated": "2026-11-10T18:18:49.032Z" + }, + { + "cveId": "CVE-2026-113767", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113767", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113767.json", + "dateUpdated": "2026-11-10T18:18:49.622Z" + }, + { + "cveId": "CVE-2026-113768", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113768", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113768.json", + "dateUpdated": "2026-11-10T18:18:50.145Z" + }, + { + "cveId": "CVE-2026-113769", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113769", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113769.json", + "dateUpdated": "2026-11-10T18:18:50.656Z" + }, + { + "cveId": "CVE-2026-113770", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113770", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113770.json", + "dateUpdated": "2026-11-10T18:18:51.246Z" + }, + { + "cveId": "CVE-2026-113771", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113771", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113771.json", + "dateUpdated": "2026-11-10T18:18:51.682Z" + }, + { + "cveId": "CVE-2026-113772", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113772", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113772.json", + "dateUpdated": "2026-11-10T18:18:52.202Z" + }, + { + "cveId": "CVE-2026-113773", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113773", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113773.json", + "dateUpdated": "2026-11-10T18:18:52.730Z" + }, + { + "cveId": "CVE-2026-113814", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113814", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113814.json", + "dateUpdated": "2026-11-10T18:18:53.244Z" + }, + { + "cveId": "CVE-2026-113815", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113815", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113815.json", + "dateUpdated": "2026-11-10T18:18:53.903Z" + }, + { + "cveId": "CVE-2026-113816", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113816", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113816.json", + "dateUpdated": "2026-11-10T18:18:54.491Z" + }, + { + "cveId": "CVE-2026-113817", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113817", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113817.json", + "dateUpdated": "2026-11-10T18:18:55.098Z" + }, + { + "cveId": "CVE-2026-113818", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113818", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113818.json", + "dateUpdated": "2026-11-10T18:18:55.738Z" + }, + { + "cveId": "CVE-2026-113819", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113819", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113819.json", + "dateUpdated": "2026-11-10T18:18:56.246Z" + }, + { + "cveId": "CVE-2026-113820", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113820", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113820.json", + "dateUpdated": "2026-11-10T18:18:56.771Z" + }, + { + "cveId": "CVE-2026-113821", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113821", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113821.json", + "dateUpdated": "2026-11-10T18:18:57.396Z" + }, + { + "cveId": "CVE-2026-113822", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113822", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113822.json", + "dateUpdated": "2026-11-10T18:17:59.673Z" + }, + { + "cveId": "CVE-2026-113823", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113823", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113823.json", + "dateUpdated": "2026-11-10T18:18:00.267Z" + }, + { + "cveId": "CVE-2026-113825", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113825", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113825.json", + "dateUpdated": "2026-11-10T18:18:57.919Z" + }, + { + "cveId": "CVE-2026-113842", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113842", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113842.json", + "dateUpdated": "2026-11-10T18:19:04.492Z" + }, + { + "cveId": "CVE-2026-113843", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113843", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113843.json", + "dateUpdated": "2026-11-10T18:19:05.116Z" + }, + { + "cveId": "CVE-2026-113844", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113844", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113844.json", + "dateUpdated": "2026-11-10T18:19:05.650Z" + }, + { + "cveId": "CVE-2026-113847", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113847", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113847.json", + "dateUpdated": "2026-11-10T18:19:06.336Z" + }, + { + "cveId": "CVE-2026-113848", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113848", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113848.json", + "dateUpdated": "2026-11-10T18:19:07.111Z" + }, + { + "cveId": "CVE-2026-113855", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113855", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113855.json", + "dateUpdated": "2026-11-10T18:19:07.710Z" + }, + { + "cveId": "CVE-2026-113856", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113856", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113856.json", + "dateUpdated": "2026-11-10T18:19:08.325Z" + }, + { + "cveId": "CVE-2026-113859", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113859", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113859.json", + "dateUpdated": "2026-11-10T18:19:08.831Z" + }, + { + "cveId": "CVE-2026-113860", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113860", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113860.json", + "dateUpdated": "2026-11-10T18:19:09.362Z" + }, + { + "cveId": "CVE-2026-113861", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113861", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113861.json", + "dateUpdated": "2026-11-10T18:19:09.885Z" + }, + { + "cveId": "CVE-2026-113862", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113862", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113862.json", + "dateUpdated": "2026-11-10T18:19:10.468Z" + }, + { + "cveId": "CVE-2026-113863", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113863", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113863.json", + "dateUpdated": "2026-11-10T18:19:11.026Z" + }, + { + "cveId": "CVE-2026-113864", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113864", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113864.json", + "dateUpdated": "2026-11-10T18:19:11.468Z" + }, + { + "cveId": "CVE-2026-113865", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-113865", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/113xxx/CVE-2026-113865.json", + "dateUpdated": "2026-11-10T18:19:11.929Z" + }, + { + "cveId": "CVE-2026-114146", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114146", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114146.json", + "dateUpdated": "2026-11-10T18:19:12.520Z" + }, + { + "cveId": "CVE-2026-114147", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114147", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114147.json", + "dateUpdated": "2026-11-10T18:19:13.109Z" + }, + { + "cveId": "CVE-2026-114149", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114149", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114149.json", + "dateUpdated": "2026-11-10T18:19:13.623Z" + }, + { + "cveId": "CVE-2026-114150", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114150", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114150.json", + "dateUpdated": "2026-11-10T18:19:14.142Z" + }, + { + "cveId": "CVE-2026-114151", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114151", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114151.json", + "dateUpdated": "2026-11-10T18:19:14.695Z" + }, + { + "cveId": "CVE-2026-114152", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114152", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114152.json", + "dateUpdated": "2026-11-10T18:19:15.201Z" + }, + { + "cveId": "CVE-2026-114154", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114154", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114154.json", + "dateUpdated": "2026-11-10T18:19:15.771Z" + }, + { + "cveId": "CVE-2026-114155", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114155", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114155.json", + "dateUpdated": "2026-11-10T18:19:16.288Z" + }, + { + "cveId": "CVE-2026-114156", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114156", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114156.json", + "dateUpdated": "2026-11-10T18:19:16.822Z" + }, + { + "cveId": "CVE-2026-114157", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114157", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114157.json", + "dateUpdated": "2026-11-10T18:19:17.405Z" + }, + { + "cveId": "CVE-2026-114158", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114158", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114158.json", + "dateUpdated": "2026-11-10T18:19:17.944Z" + }, + { + "cveId": "CVE-2026-114159", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114159", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114159.json", + "dateUpdated": "2026-11-10T18:19:18.539Z" + }, + { + "cveId": "CVE-2026-114160", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114160", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114160.json", + "dateUpdated": "2026-11-10T18:20:45.229Z" + }, + { + "cveId": "CVE-2026-114161", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114161", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114161.json", + "dateUpdated": "2026-11-10T18:20:44.247Z" + }, + { + "cveId": "CVE-2026-114162", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114162", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114162.json", + "dateUpdated": "2026-11-10T18:21:38.593Z" + }, + { + "cveId": "CVE-2026-114171", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114171", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114171.json", + "dateUpdated": "2026-11-10T18:22:25.327Z" + }, + { + "cveId": "CVE-2026-116697", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116697", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116697.json", + "dateUpdated": "2026-11-10T18:20:11.459Z" + }, + { + "cveId": "CVE-2026-116698", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116698", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116698.json", + "dateUpdated": "2026-11-10T18:20:11.962Z" + }, + { + "cveId": "CVE-2026-116699", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116699", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116699.json", + "dateUpdated": "2026-11-10T18:20:12.514Z" + }, + { + "cveId": "CVE-2026-116700", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116700", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116700.json", + "dateUpdated": "2026-11-10T18:20:13.119Z" + }, + { + "cveId": "CVE-2026-116706", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116706", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116706.json", + "dateUpdated": "2026-11-10T18:20:13.884Z" + }, + { + "cveId": "CVE-2026-116707", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116707", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116707.json", + "dateUpdated": "2026-11-10T18:20:14.433Z" + }, + { + "cveId": "CVE-2026-116710", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116710", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116710.json", + "dateUpdated": "2026-11-10T18:20:14.998Z" + }, + { + "cveId": "CVE-2026-116714", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116714", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116714.json", + "dateUpdated": "2026-11-10T18:22:03.209Z" + }, + { + "cveId": "CVE-2026-116925", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116925", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116925.json", + "dateUpdated": "2026-11-10T18:22:03.734Z" + }, + { + "cveId": "CVE-2026-116928", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-116928", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116928.json", + "dateUpdated": "2026-11-10T18:21:54.613Z" + }, + { + "cveId": "CVE-2026-118123", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118123", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118123.json", + "dateUpdated": "2026-11-10T18:20:15.549Z" + }, + { + "cveId": "CVE-2026-118124", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118124", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118124.json", + "dateUpdated": "2026-11-10T18:20:16.122Z" + }, + { + "cveId": "CVE-2026-118125", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118125", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118125.json", + "dateUpdated": "2026-11-10T18:20:16.668Z" + }, + { + "cveId": "CVE-2026-118126", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118126", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118126.json", + "dateUpdated": "2026-11-10T18:20:17.208Z" + }, + { + "cveId": "CVE-2026-118137", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118137", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118137.json", + "dateUpdated": "2026-11-10T18:20:17.799Z" + }, + { + "cveId": "CVE-2026-118138", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118138", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118138.json", + "dateUpdated": "2026-11-10T18:20:18.265Z" + }, + { + "cveId": "CVE-2026-118140", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118140", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118140.json", + "dateUpdated": "2026-11-10T18:20:18.771Z" + }, + { + "cveId": "CVE-2026-118141", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118141", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118141.json", + "dateUpdated": "2026-11-10T18:20:19.257Z" + }, + { + "cveId": "CVE-2026-118142", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118142", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118142.json", + "dateUpdated": "2026-11-10T18:20:19.693Z" + }, + { + "cveId": "CVE-2026-118143", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118143", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118143.json", + "dateUpdated": "2026-11-10T18:20:20.228Z" + }, + { + "cveId": "CVE-2026-118144", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118144", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118144.json", + "dateUpdated": "2026-11-10T18:20:20.733Z" + }, + { + "cveId": "CVE-2026-118145", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118145", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118145.json", + "dateUpdated": "2026-11-10T18:20:21.280Z" + }, + { + "cveId": "CVE-2026-118146", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118146", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118146.json", + "dateUpdated": "2026-11-10T18:20:21.879Z" + }, + { + "cveId": "CVE-2026-118149", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118149", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118149.json", + "dateUpdated": "2026-11-10T18:21:45.740Z" + }, + { + "cveId": "CVE-2026-118150", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118150", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118150.json", + "dateUpdated": "2026-11-10T18:21:46.259Z" + }, + { + "cveId": "CVE-2026-118151", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118151", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118151.json", + "dateUpdated": "2026-11-10T18:21:46.777Z" + }, + { + "cveId": "CVE-2026-118152", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118152", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118152.json", + "dateUpdated": "2026-11-10T18:21:47.220Z" + }, + { + "cveId": "CVE-2026-118153", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118153", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118153.json", + "dateUpdated": "2026-11-10T18:21:47.797Z" + }, + { + "cveId": "CVE-2026-118154", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118154", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118154.json", + "dateUpdated": "2026-11-10T18:21:48.312Z" + }, + { + "cveId": "CVE-2026-118157", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118157", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118157.json", + "dateUpdated": "2026-11-10T18:21:48.749Z" + }, + { + "cveId": "CVE-2026-118207", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118207", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118207.json", + "dateUpdated": "2026-11-10T18:21:49.272Z" + }, + { + "cveId": "CVE-2026-118208", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118208", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118208.json", + "dateUpdated": "2026-11-10T18:21:49.791Z" + }, + { + "cveId": "CVE-2026-118213", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118213", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118213.json", + "dateUpdated": "2026-11-10T18:20:22.493Z" + }, + { + "cveId": "CVE-2026-118214", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118214", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118214.json", + "dateUpdated": "2026-11-10T18:20:23.092Z" + }, + { + "cveId": "CVE-2026-118215", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118215", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118215.json", + "dateUpdated": "2026-11-10T18:20:23.543Z" + }, + { + "cveId": "CVE-2026-118216", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118216", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118216.json", + "dateUpdated": "2026-11-10T18:20:24.049Z" + }, + { + "cveId": "CVE-2026-118217", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118217", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118217.json", + "dateUpdated": "2026-11-10T18:20:24.564Z" + }, + { + "cveId": "CVE-2026-118218", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118218", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118218.json", + "dateUpdated": "2026-11-10T18:20:25.098Z" + }, + { + "cveId": "CVE-2026-118219", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118219", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118219.json", + "dateUpdated": "2026-11-10T18:20:27.219Z" + }, + { + "cveId": "CVE-2026-118220", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118220", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118220.json", + "dateUpdated": "2026-11-10T18:20:27.752Z" + }, + { + "cveId": "CVE-2026-118221", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118221", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118221.json", + "dateUpdated": "2026-11-10T18:20:28.346Z" + }, + { + "cveId": "CVE-2026-118222", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118222", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118222.json", + "dateUpdated": "2026-11-10T18:20:28.867Z" + }, + { + "cveId": "CVE-2026-118223", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118223", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118223.json", + "dateUpdated": "2026-11-10T18:20:29.448Z" + }, + { + "cveId": "CVE-2026-118224", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118224", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118224.json", + "dateUpdated": "2026-11-10T18:20:29.981Z" + }, + { + "cveId": "CVE-2026-118225", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118225", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118225.json", + "dateUpdated": "2026-11-10T18:20:30.514Z" + }, + { + "cveId": "CVE-2026-118226", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118226", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118226.json", + "dateUpdated": "2026-11-10T18:20:30.965Z" + }, + { + "cveId": "CVE-2026-118227", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118227", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118227.json", + "dateUpdated": "2026-11-10T18:20:31.575Z" + }, + { + "cveId": "CVE-2026-118228", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118228", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118228.json", + "dateUpdated": "2026-11-10T18:20:32.119Z" + }, + { + "cveId": "CVE-2026-118229", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118229", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118229.json", + "dateUpdated": "2026-11-10T18:20:32.646Z" + }, + { + "cveId": "CVE-2026-118232", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118232", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118232.json", + "dateUpdated": "2026-11-10T18:20:33.165Z" + }, + { + "cveId": "CVE-2026-118277", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118277", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118277.json", + "dateUpdated": "2026-11-10T18:20:33.610Z" + }, + { + "cveId": "CVE-2026-118278", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118278", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118278.json", + "dateUpdated": "2026-11-10T18:20:34.120Z" + }, + { + "cveId": "CVE-2026-118279", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118279", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118279.json", + "dateUpdated": "2026-11-10T18:20:34.679Z" + }, + { + "cveId": "CVE-2026-118280", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118280", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118280.json", + "dateUpdated": "2026-11-10T18:20:35.116Z" + }, + { + "cveId": "CVE-2026-118283", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118283", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118283.json", + "dateUpdated": "2026-11-10T18:20:35.630Z" + }, + { + "cveId": "CVE-2026-118735", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118735", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118735.json", + "dateUpdated": "2026-11-10T18:20:36.153Z" + }, + { + "cveId": "CVE-2026-118736", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118736", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118736.json", + "dateUpdated": "2026-11-10T18:20:36.659Z" + }, + { + "cveId": "CVE-2026-118737", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118737", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118737.json", + "dateUpdated": "2026-11-10T18:20:37.177Z" + }, + { + "cveId": "CVE-2026-118739", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118739", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118739.json", + "dateUpdated": "2026-11-10T18:21:50.233Z" + }, + { + "cveId": "CVE-2026-118742", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118742", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118742.json", + "dateUpdated": "2026-11-10T18:20:37.698Z" + }, + { + "cveId": "CVE-2026-118745", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118745", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118745.json", + "dateUpdated": "2026-11-10T18:21:51.212Z" + }, + { + "cveId": "CVE-2026-118746", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118746", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118746.json", + "dateUpdated": "2026-11-10T18:21:51.731Z" + }, + { + "cveId": "CVE-2026-118747", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118747", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118747.json", + "dateUpdated": "2026-11-10T18:21:52.172Z" + }, + { + "cveId": "CVE-2026-118748", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118748", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118748.json", + "dateUpdated": "2026-11-10T18:21:52.687Z" + }, + { + "cveId": "CVE-2026-118749", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118749", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118749.json", + "dateUpdated": "2026-11-10T18:21:53.138Z" + }, + { + "cveId": "CVE-2026-118750", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-118750", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/118xxx/CVE-2026-118750.json", + "dateUpdated": "2026-11-10T18:21:53.594Z" + }, + { + "cveId": "CVE-2026-119383", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119383", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119383.json", + "dateUpdated": "2026-11-10T18:22:25.793Z" + }, + { + "cveId": "CVE-2026-119385", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119385", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119385.json", + "dateUpdated": "2026-11-10T18:22:26.377Z" + }, + { + "cveId": "CVE-2026-119386", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119386", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119386.json", + "dateUpdated": "2026-11-10T18:22:26.990Z" + }, + { + "cveId": "CVE-2026-119387", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119387", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119387.json", + "dateUpdated": "2026-11-10T18:22:27.542Z" + }, + { + "cveId": "CVE-2026-119388", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119388", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119388.json", + "dateUpdated": "2026-11-10T18:22:28.013Z" + }, + { + "cveId": "CVE-2026-119389", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119389", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119389.json", + "dateUpdated": "2026-11-10T18:22:28.524Z" + }, + { + "cveId": "CVE-2026-119390", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119390", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119390.json", + "dateUpdated": "2026-11-10T18:22:29.072Z" + }, + { + "cveId": "CVE-2026-119391", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119391", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119391.json", + "dateUpdated": "2026-11-10T18:22:29.691Z" + }, + { + "cveId": "CVE-2026-119392", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119392", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119392.json", + "dateUpdated": "2026-11-10T18:22:30.346Z" + }, + { + "cveId": "CVE-2026-119393", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119393", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119393.json", + "dateUpdated": "2026-11-10T18:22:30.836Z" + }, + { + "cveId": "CVE-2026-119394", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119394", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119394.json", + "dateUpdated": "2026-11-10T18:22:31.429Z" + }, + { + "cveId": "CVE-2026-119395", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119395", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119395.json", + "dateUpdated": "2026-11-10T18:22:32.023Z" + }, + { + "cveId": "CVE-2026-119396", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119396", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119396.json", + "dateUpdated": "2026-11-10T18:22:32.497Z" + }, + { + "cveId": "CVE-2026-119397", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119397", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119397.json", + "dateUpdated": "2026-11-10T18:22:33.017Z" + }, + { + "cveId": "CVE-2026-119398", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119398", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119398.json", + "dateUpdated": "2026-11-10T18:22:33.537Z" + }, + { + "cveId": "CVE-2026-119399", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119399", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119399.json", + "dateUpdated": "2026-11-10T18:22:34.074Z" + }, + { + "cveId": "CVE-2026-119401", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119401", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119401.json", + "dateUpdated": "2026-11-10T18:22:34.554Z" + }, + { + "cveId": "CVE-2026-119959", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119959", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119959.json", + "dateUpdated": "2026-11-10T18:20:41.905Z" + }, + { + "cveId": "CVE-2026-119975", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119975", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119975.json", + "dateUpdated": "2026-11-10T18:22:04.318Z" + }, + { + "cveId": "CVE-2026-119976", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119976", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119976.json", + "dateUpdated": "2026-11-10T18:22:04.843Z" + }, + { + "cveId": "CVE-2026-119981", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119981", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119981.json", + "dateUpdated": "2026-11-10T18:22:05.368Z" + }, + { + "cveId": "CVE-2026-119982", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119982", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119982.json", + "dateUpdated": "2026-11-10T18:22:05.943Z" + }, + { + "cveId": "CVE-2026-119985", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119985", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119985.json", + "dateUpdated": "2026-11-10T18:21:56.732Z" + }, + { + "cveId": "CVE-2026-119986", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119986", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119986.json", + "dateUpdated": "2026-11-10T18:22:06.402Z" + }, + { + "cveId": "CVE-2026-119987", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119987", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119987.json", + "dateUpdated": "2026-11-10T18:21:54.104Z" + }, + { + "cveId": "CVE-2026-119990", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119990", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119990.json", + "dateUpdated": "2026-11-10T18:21:39.815Z" + }, + { + "cveId": "CVE-2026-119991", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119991", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119991.json", + "dateUpdated": "2026-11-10T18:20:38.205Z" + }, + { + "cveId": "CVE-2026-119992", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-119992", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/119xxx/CVE-2026-119992.json", + "dateUpdated": "2026-11-10T18:21:55.133Z" + }, + { + "cveId": "CVE-2026-120005", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120005", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120005.json", + "dateUpdated": "2026-11-10T18:22:06.994Z" + }, + { + "cveId": "CVE-2026-120006", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120006", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120006.json", + "dateUpdated": "2026-11-10T18:21:40.427Z" + }, + { + "cveId": "CVE-2026-120779", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120779", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120779.json", + "dateUpdated": "2026-11-10T18:21:55.640Z" + }, + { + "cveId": "CVE-2026-120780", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120780", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120780.json", + "dateUpdated": "2026-11-10T18:21:56.148Z" + }, + { + "cveId": "CVE-2026-120782", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120782", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120782.json", + "dateUpdated": "2026-11-10T18:21:41.006Z" + }, + { + "cveId": "CVE-2026-120783", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120783", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120783.json", + "dateUpdated": "2026-11-10T18:22:07.509Z" + }, + { + "cveId": "CVE-2026-120785", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120785", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120785.json", + "dateUpdated": "2026-11-10T18:22:07.951Z" + }, + { + "cveId": "CVE-2026-120786", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120786", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120786.json", + "dateUpdated": "2026-11-10T18:22:08.406Z" + }, + { + "cveId": "CVE-2026-120788", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120788", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120788.json", + "dateUpdated": "2026-11-10T18:22:09.010Z" + }, + { + "cveId": "CVE-2026-120789", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120789", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120789.json", + "dateUpdated": "2026-11-10T18:22:09.553Z" + }, + { + "cveId": "CVE-2026-120790", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120790", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120790.json", + "dateUpdated": "2026-11-10T18:22:10.084Z" + }, + { + "cveId": "CVE-2026-120791", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120791", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120791.json", + "dateUpdated": "2026-11-10T18:22:10.697Z" + }, + { + "cveId": "CVE-2026-120792", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-120792", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/120xxx/CVE-2026-120792.json", + "dateUpdated": "2026-11-10T18:21:57.285Z" + }, + { + "cveId": "CVE-2026-121665", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121665", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121665.json", + "dateUpdated": "2026-11-10T18:21:57.865Z" + }, + { + "cveId": "CVE-2026-121668", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121668", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121668.json", + "dateUpdated": "2026-11-10T18:21:58.378Z" + }, + { + "cveId": "CVE-2026-122194", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122194", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122194.json", + "dateUpdated": "2026-11-10T18:21:58.966Z" + }, + { + "cveId": "CVE-2026-122196", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122196", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122196.json", + "dateUpdated": "2026-11-10T18:20:38.777Z" + }, + { + "cveId": "CVE-2026-122198", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122198", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122198.json", + "dateUpdated": "2026-11-10T18:20:39.218Z" + }, + { + "cveId": "CVE-2026-122518", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122518", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122518.json", + "dateUpdated": "2026-11-10T18:21:59.563Z" + }, + { + "cveId": "CVE-2026-122979", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122979", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122979.json", + "dateUpdated": "2026-11-10T18:20:40.850Z" + }, + { + "cveId": "CVE-2026-122984", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122984", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122984.json", + "dateUpdated": "2026-11-10T18:21:42.214Z" + }, + { + "cveId": "CVE-2026-122985", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122985", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122985.json", + "dateUpdated": "2026-11-10T18:20:41.370Z" + }, + { + "cveId": "CVE-2026-122986", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122986", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122986.json", + "dateUpdated": "2026-11-10T18:22:00.162Z" + }, + { + "cveId": "CVE-2026-122987", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122987", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122987.json", + "dateUpdated": "2026-11-10T18:22:00.666Z" + }, + { + "cveId": "CVE-2026-122988", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122988", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122988.json", + "dateUpdated": "2026-11-10T18:22:23.050Z" + }, + { + "cveId": "CVE-2026-123375", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123375", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123375.json", + "dateUpdated": "2026-11-10T18:22:11.212Z" + }, + { + "cveId": "CVE-2026-123376", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123376", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123376.json", + "dateUpdated": "2026-11-10T18:22:11.751Z" + }, + { + "cveId": "CVE-2026-123377", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123377", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123377.json", + "dateUpdated": "2026-11-10T18:22:12.328Z" + }, + { + "cveId": "CVE-2026-123378", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123378", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123378.json", + "dateUpdated": "2026-11-10T18:22:12.845Z" + }, + { + "cveId": "CVE-2026-123379", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123379", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123379.json", + "dateUpdated": "2026-11-10T18:22:13.387Z" + }, + { + "cveId": "CVE-2026-123380", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123380", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123380.json", + "dateUpdated": "2026-11-10T18:22:13.978Z" + }, + { + "cveId": "CVE-2026-123381", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123381", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123381.json", + "dateUpdated": "2026-11-10T18:22:14.495Z" + }, + { + "cveId": "CVE-2026-123382", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123382", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123382.json", + "dateUpdated": "2026-11-10T18:22:14.964Z" + }, + { + "cveId": "CVE-2026-123383", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123383", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123383.json", + "dateUpdated": "2026-11-10T18:22:15.465Z" + }, + { + "cveId": "CVE-2026-123384", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123384", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123384.json", + "dateUpdated": "2026-11-10T18:22:15.997Z" + }, + { + "cveId": "CVE-2026-123385", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123385", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123385.json", + "dateUpdated": "2026-11-10T18:22:16.548Z" + }, + { + "cveId": "CVE-2026-123387", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123387", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123387.json", + "dateUpdated": "2026-11-10T18:20:42.347Z" + }, + { + "cveId": "CVE-2026-123388", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123388", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123388.json", + "dateUpdated": "2026-11-10T18:20:43.083Z" + }, + { + "cveId": "CVE-2026-123389", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123389", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123389.json", + "dateUpdated": "2026-11-10T18:20:43.655Z" + }, + { + "cveId": "CVE-2026-123390", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123390", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123390.json", + "dateUpdated": "2026-11-10T18:22:23.540Z" + }, + { + "cveId": "CVE-2026-123391", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123391", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123391.json", + "dateUpdated": "2026-11-10T18:22:24.125Z" + }, + { + "cveId": "CVE-2026-123394", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123394", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123394.json", + "dateUpdated": "2026-11-10T18:22:17.086Z" + }, + { + "cveId": "CVE-2026-123395", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123395", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123395.json", + "dateUpdated": "2026-11-10T18:22:17.553Z" + }, + { + "cveId": "CVE-2026-124170", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124170", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124170.json", + "dateUpdated": "2026-11-10T18:22:18.088Z" + }, + { + "cveId": "CVE-2026-124174", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124174", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124174.json", + "dateUpdated": "2026-11-10T18:22:18.539Z" + }, + { + "cveId": "CVE-2026-124176", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124176", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124176.json", + "dateUpdated": "2026-11-10T18:22:19.205Z" + }, + { + "cveId": "CVE-2026-124178", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124178", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124178.json", + "dateUpdated": "2026-11-10T18:22:19.758Z" + }, + { + "cveId": "CVE-2026-124179", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124179", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124179.json", + "dateUpdated": "2026-11-10T18:22:20.274Z" + }, + { + "cveId": "CVE-2026-124183", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124183", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124183.json", + "dateUpdated": "2026-11-10T18:22:20.828Z" + }, + { + "cveId": "CVE-2026-124185", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124185", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124185.json", + "dateUpdated": "2026-11-10T18:22:21.484Z" + }, + { + "cveId": "CVE-2026-124187", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124187", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124187.json", + "dateUpdated": "2026-11-10T18:22:22.050Z" + }, + { + "cveId": "CVE-2026-124194", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124194", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124194.json", + "dateUpdated": "2026-11-10T18:22:22.493Z" + }, + { + "cveId": "CVE-2026-124210", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124210", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124210.json", + "dateUpdated": "2026-11-10T18:22:24.748Z" + }, + { + "cveId": "CVE-2026-124224", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124224", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124224.json", + "dateUpdated": "2026-11-10T18:21:42.752Z" + }, + { + "cveId": "CVE-2026-124225", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124225", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124225.json", + "dateUpdated": "2026-11-10T18:21:43.300Z" + }, + { + "cveId": "CVE-2026-124226", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124226", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124226.json", + "dateUpdated": "2026-11-10T18:21:43.741Z" + }, + { + "cveId": "CVE-2026-124227", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124227", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124227.json", + "dateUpdated": "2026-11-10T18:22:01.191Z" + }, + { + "cveId": "CVE-2026-124228", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124228", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124228.json", + "dateUpdated": "2026-11-10T18:22:01.640Z" + }, + { + "cveId": "CVE-2026-124229", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124229", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124229.json", + "dateUpdated": "2026-11-10T18:22:02.080Z" + }, + { + "cveId": "CVE-2026-124233", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124233", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124233.json", + "dateUpdated": "2026-11-10T18:22:02.672Z" + }, + { + "cveId": "CVE-2026-125134", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125134", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125134.json", + "dateUpdated": "2026-11-10T18:20:09.691Z" + }, + { + "cveId": "CVE-2026-125135", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125135", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125135.json", + "dateUpdated": "2026-11-10T18:21:44.260Z" + }, + { + "cveId": "CVE-2026-125136", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125136", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125136.json", + "dateUpdated": "2026-11-10T18:21:44.712Z" + }, + { + "cveId": "CVE-2026-125137", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125137", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125137.json", + "dateUpdated": "2026-11-10T18:21:45.225Z" + }, + { + "cveId": "CVE-2026-66813", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66813", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66813.json", + "dateUpdated": "2026-11-10T18:16:49.019Z" + }, + { + "cveId": "CVE-2026-67372", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67372", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67372.json", + "dateUpdated": "2026-11-10T18:16:38.380Z" + }, + { + "cveId": "CVE-2026-67374", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67374", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67374.json", + "dateUpdated": "2026-11-10T18:17:49.375Z" + }, + { + "cveId": "CVE-2026-67375", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67375", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67375.json", + "dateUpdated": "2026-11-10T18:17:50.413Z" + }, + { + "cveId": "CVE-2026-67382", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67382", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67382.json", + "dateUpdated": "2026-11-10T18:16:47.975Z" + }, + { + "cveId": "CVE-2026-67387", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67387", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67387.json", + "dateUpdated": "2026-11-10T18:16:40.224Z" + }, + { + "cveId": "CVE-2026-67391", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67391", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67391.json", + "dateUpdated": "2026-11-10T18:15:37.335Z" + }, + { + "cveId": "CVE-2026-67632", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67632", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67632.json", + "dateUpdated": "2026-11-10T18:16:49.628Z" + }, + { + "cveId": "CVE-2026-67637", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67637", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67637.json", + "dateUpdated": "2026-11-10T18:16:48.572Z" + }, + { + "cveId": "CVE-2026-67646", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-67646", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67646.json", + "dateUpdated": "2026-11-10T18:16:39.701Z" + }, + { + "cveId": "CVE-2026-68783", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-68783", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/68xxx/CVE-2026-68783.json", + "dateUpdated": "2026-11-10T18:17:49.888Z" + }, + { + "cveId": "CVE-2026-69327", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-69327", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/69xxx/CVE-2026-69327.json", + "dateUpdated": "2026-11-10T18:15:37.865Z" + }, + { + "cveId": "CVE-2026-69565", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-69565", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/69xxx/CVE-2026-69565.json", + "dateUpdated": "2026-11-10T18:15:36.835Z" + }, + { + "cveId": "CVE-2026-69901", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-69901", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/69xxx/CVE-2026-69901.json", + "dateUpdated": "2026-11-10T18:19:19.135Z" + }, + { + "cveId": "CVE-2026-70003", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70003", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70003.json", + "dateUpdated": "2026-11-10T18:20:09.069Z" + }, + { + "cveId": "CVE-2026-70094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70094.json", + "dateUpdated": "2026-11-10T18:16:52.358Z" + }, + { + "cveId": "CVE-2026-70120", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70120", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70120.json", + "dateUpdated": "2026-11-10T18:15:40.991Z" + }, + { + "cveId": "CVE-2026-70182", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70182", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70182.json", + "dateUpdated": "2026-11-10T18:20:03.922Z" + }, + { + "cveId": "CVE-2026-70231", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70231", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70231.json", + "dateUpdated": "2026-11-10T18:15:39.390Z" + }, + { + "cveId": "CVE-2026-70240", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-70240", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70240.json", + "dateUpdated": "2026-11-10T18:15:41.443Z" + }, + { + "cveId": "CVE-2026-72998", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-72998", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/72xxx/CVE-2026-72998.json", + "dateUpdated": "2026-11-10T18:16:50.233Z" + }, + { + "cveId": "CVE-2026-80094", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-80094", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/80xxx/CVE-2026-80094.json", + "dateUpdated": "2026-11-10T18:21:41.528Z" + }, + { + "cveId": "CVE-2026-80095", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-80095", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/80xxx/CVE-2026-80095.json", + "dateUpdated": "2026-11-10T18:20:08.534Z" + }, + { + "cveId": "CVE-2026-81384", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-81384", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/81xxx/CVE-2026-81384.json", + "dateUpdated": "2026-11-10T18:15:38.372Z" + }, + { + "cveId": "CVE-2026-83563", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83563", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83563.json", + "dateUpdated": "2026-11-10T18:20:03.321Z" + }, + { + "cveId": "CVE-2026-83953", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83953", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83953.json", + "dateUpdated": "2026-11-10T18:16:50.751Z" + }, + { + "cveId": "CVE-2026-84010", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84010", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84010.json", + "dateUpdated": "2026-11-10T18:21:50.685Z" + }, + { + "cveId": "CVE-2026-85844", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85844", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85844.json", + "dateUpdated": "2026-11-10T18:20:02.722Z" + }, + { + "cveId": "CVE-2026-85862", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85862", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85862.json", + "dateUpdated": "2026-11-10T18:15:38.882Z" + }, + { + "cveId": "CVE-2026-85907", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85907", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85907.json", + "dateUpdated": "2026-11-10T18:16:51.279Z" + }, + { + "cveId": "CVE-2026-85923", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85923", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85923.json", + "dateUpdated": "2026-11-10T18:16:51.830Z" + }, + { + "cveId": "CVE-2026-85929", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85929", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85929.json", + "dateUpdated": "2026-11-10T18:17:48.862Z" + }, + { + "cveId": "CVE-2026-85942", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85942", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85942.json", + "dateUpdated": "2026-11-10T18:19:59.556Z" + }, + { + "cveId": "CVE-2026-88111", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88111", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88111.json", + "dateUpdated": "2026-11-10T18:20:07.517Z" + }, + { + "cveId": "CVE-2026-88187", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88187", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88187.json", + "dateUpdated": "2026-11-10T18:16:52.814Z" + }, + { + "cveId": "CVE-2026-88211", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88211", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88211.json", + "dateUpdated": "2026-11-10T18:16:53.400Z" + }, + { + "cveId": "CVE-2026-88212", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88212", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88212.json", + "dateUpdated": "2026-11-10T18:20:10.363Z" + }, + { + "cveId": "CVE-2026-88213", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88213", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88213.json", + "dateUpdated": "2026-11-10T18:16:53.854Z" + }, + { + "cveId": "CVE-2026-88215", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88215", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88215.json", + "dateUpdated": "2026-11-10T18:16:54.297Z" + }, + { + "cveId": "CVE-2026-88216", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88216", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88216.json", + "dateUpdated": "2026-11-10T18:15:42.071Z" + }, + { + "cveId": "CVE-2026-88217", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88217", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88217.json", + "dateUpdated": "2026-11-10T18:16:54.826Z" + }, + { + "cveId": "CVE-2026-88218", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88218", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88218.json", + "dateUpdated": "2026-11-10T18:15:42.593Z" + }, + { + "cveId": "CVE-2026-88220", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88220", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88220.json", + "dateUpdated": "2026-11-10T18:15:43.470Z" + }, + { + "cveId": "CVE-2026-88221", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88221", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88221.json", + "dateUpdated": "2026-11-10T18:15:44.064Z" + }, + { + "cveId": "CVE-2026-88222", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88222", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88222.json", + "dateUpdated": "2026-11-10T18:20:10.868Z" + }, + { + "cveId": "CVE-2026-88224", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88224", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88224.json", + "dateUpdated": "2026-11-10T18:16:55.282Z" + }, + { + "cveId": "CVE-2026-88227", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88227", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88227.json", + "dateUpdated": "2026-11-10T18:15:44.510Z" + }, + { + "cveId": "CVE-2026-88228", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88228", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88228.json", + "dateUpdated": "2026-11-10T18:15:45.043Z" + }, + { + "cveId": "CVE-2026-88229", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88229", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88229.json", + "dateUpdated": "2026-11-10T18:16:55.870Z" + }, + { + "cveId": "CVE-2026-88230", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88230", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88230.json", + "dateUpdated": "2026-11-10T18:15:45.508Z" + }, + { + "cveId": "CVE-2026-88231", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88231", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88231.json", + "dateUpdated": "2026-11-10T18:15:46.031Z" + }, + { + "cveId": "CVE-2026-88232", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88232", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88232.json", + "dateUpdated": "2026-11-10T18:15:46.560Z" + }, + { + "cveId": "CVE-2026-88233", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88233", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88233.json", + "dateUpdated": "2026-11-10T18:15:47.005Z" + }, + { + "cveId": "CVE-2026-88234", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88234", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88234.json", + "dateUpdated": "2026-11-10T18:16:56.383Z" + }, + { + "cveId": "CVE-2026-88235", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88235", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88235.json", + "dateUpdated": "2026-11-10T18:15:47.444Z" + }, + { + "cveId": "CVE-2026-88236", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88236", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88236.json", + "dateUpdated": "2026-11-10T18:15:47.955Z" + }, + { + "cveId": "CVE-2026-88237", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88237", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88237.json", + "dateUpdated": "2026-11-10T18:16:56.991Z" + }, + { + "cveId": "CVE-2026-88238", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88238", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88238.json", + "dateUpdated": "2026-11-10T18:16:57.513Z" + }, + { + "cveId": "CVE-2026-88239", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88239", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88239.json", + "dateUpdated": "2026-11-10T18:16:58.038Z" + }, + { + "cveId": "CVE-2026-88240", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88240", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88240.json", + "dateUpdated": "2026-11-10T18:16:58.621Z" + }, + { + "cveId": "CVE-2026-88241", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88241", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88241.json", + "dateUpdated": "2026-11-10T18:15:48.498Z" + }, + { + "cveId": "CVE-2026-88242", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88242", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88242.json", + "dateUpdated": "2026-11-10T18:16:59.149Z" + }, + { + "cveId": "CVE-2026-88243", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88243", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88243.json", + "dateUpdated": "2026-11-10T18:16:59.675Z" + }, + { + "cveId": "CVE-2026-88244", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88244", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88244.json", + "dateUpdated": "2026-11-10T18:15:49.006Z" + }, + { + "cveId": "CVE-2026-88245", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88245", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88245.json", + "dateUpdated": "2026-11-10T18:17:00.272Z" + }, + { + "cveId": "CVE-2026-88247", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88247", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88247.json", + "dateUpdated": "2026-11-10T18:15:49.447Z" + }, + { + "cveId": "CVE-2026-88249", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88249", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88249.json", + "dateUpdated": "2026-11-10T18:15:50.034Z" + }, + { + "cveId": "CVE-2026-88822", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88822", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88822.json", + "dateUpdated": "2026-11-10T18:15:38.961Z" + }, + { + "cveId": "CVE-2026-88823", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88823", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88823.json", + "dateUpdated": "2026-11-10T18:15:49.358Z" + }, + { + "cveId": "CVE-2026-94507", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94507", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94507.json", + "dateUpdated": "2026-11-10T18:17:00.785Z" + }, + { + "cveId": "CVE-2026-94514", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94514", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94514.json", + "dateUpdated": "2026-11-10T18:17:01.231Z" + }, + { + "cveId": "CVE-2026-94515", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94515", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94515.json", + "dateUpdated": "2026-11-10T18:15:50.626Z" + }, + { + "cveId": "CVE-2026-94517", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94517", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94517.json", + "dateUpdated": "2026-11-10T18:15:51.160Z" + }, + { + "cveId": "CVE-2026-94519", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94519", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94519.json", + "dateUpdated": "2026-11-10T18:15:51.754Z" + }, + { + "cveId": "CVE-2026-94522", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94522", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94522.json", + "dateUpdated": "2026-11-10T18:15:52.269Z" + }, + { + "cveId": "CVE-2026-94525", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94525", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94525.json", + "dateUpdated": "2026-11-10T18:17:01.764Z" + }, + { + "cveId": "CVE-2026-94527", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94527", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94527.json", + "dateUpdated": "2026-11-10T18:15:52.787Z" + }, + { + "cveId": "CVE-2026-94529", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94529", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94529.json", + "dateUpdated": "2026-11-10T18:17:02.368Z" + }, + { + "cveId": "CVE-2026-94531", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94531", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94531.json", + "dateUpdated": "2026-11-10T18:17:02.847Z" + }, + { + "cveId": "CVE-2026-95691", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95691", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95691.json", + "dateUpdated": "2026-11-10T18:16:03.752Z" + }, + { + "cveId": "CVE-2026-95692", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95692", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95692.json", + "dateUpdated": "2026-11-10T18:16:18.675Z" + }, + { + "cveId": "CVE-2026-95871", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95871", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95871.json", + "dateUpdated": "2026-11-10T18:17:03.448Z" + }, + { + "cveId": "CVE-2026-95872", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95872", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95872.json", + "dateUpdated": "2026-11-10T18:15:53.304Z" + }, + { + "cveId": "CVE-2026-95874", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95874", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95874.json", + "dateUpdated": "2026-11-10T18:15:53.826Z" + }, + { + "cveId": "CVE-2026-95876", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95876", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95876.json", + "dateUpdated": "2026-11-10T18:17:03.981Z" + }, + { + "cveId": "CVE-2026-95877", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95877", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95877.json", + "dateUpdated": "2026-11-10T18:17:04.509Z" + }, + { + "cveId": "CVE-2026-95879", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95879", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95879.json", + "dateUpdated": "2026-11-10T18:17:05.013Z" + }, + { + "cveId": "CVE-2026-95881", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95881", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95881.json", + "dateUpdated": "2026-11-10T18:17:05.567Z" + }, + { + "cveId": "CVE-2026-95882", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95882", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95882.json", + "dateUpdated": "2026-11-10T18:15:54.409Z" + }, + { + "cveId": "CVE-2026-95884", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95884", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95884.json", + "dateUpdated": "2026-11-10T18:15:54.939Z" + }, + { + "cveId": "CVE-2026-95885", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95885", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95885.json", + "dateUpdated": "2026-11-10T18:15:55.455Z" + }, + { + "cveId": "CVE-2026-95888", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95888", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95888.json", + "dateUpdated": "2026-11-10T18:17:06.133Z" + }, + { + "cveId": "CVE-2026-95889", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95889", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95889.json", + "dateUpdated": "2026-11-10T18:17:06.566Z" + }, + { + "cveId": "CVE-2026-95891", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95891", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95891.json", + "dateUpdated": "2026-11-10T18:17:07.111Z" + }, + { + "cveId": "CVE-2026-95893", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95893", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95893.json", + "dateUpdated": "2026-11-10T18:17:07.569Z" + }, + { + "cveId": "CVE-2026-95894", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95894", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95894.json", + "dateUpdated": "2026-11-10T18:15:56.028Z" + }, + { + "cveId": "CVE-2026-95895", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95895", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95895.json", + "dateUpdated": "2026-11-10T18:17:08.153Z" + }, + { + "cveId": "CVE-2026-95896", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95896", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95896.json", + "dateUpdated": "2026-11-10T18:17:08.724Z" + }, + { + "cveId": "CVE-2026-95898", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95898", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95898.json", + "dateUpdated": "2026-11-10T18:15:56.543Z" + }, + { + "cveId": "CVE-2026-95901", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95901", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95901.json", + "dateUpdated": "2026-11-10T18:15:56.984Z" + }, + { + "cveId": "CVE-2026-95902", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95902", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95902.json", + "dateUpdated": "2026-11-10T18:15:57.438Z" + }, + { + "cveId": "CVE-2026-95905", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95905", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95905.json", + "dateUpdated": "2026-11-10T18:15:57.955Z" + }, + { + "cveId": "CVE-2026-95906", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95906", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95906.json", + "dateUpdated": "2026-11-10T18:15:58.409Z" + }, + { + "cveId": "CVE-2026-95908", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95908", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95908.json", + "dateUpdated": "2026-11-10T18:17:09.253Z" + }, + { + "cveId": "CVE-2026-95909", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95909", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95909.json", + "dateUpdated": "2026-11-10T18:17:09.843Z" + }, + { + "cveId": "CVE-2026-95910", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95910", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95910.json", + "dateUpdated": "2026-11-10T18:17:10.432Z" + }, + { + "cveId": "CVE-2026-95913", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95913", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95913.json", + "dateUpdated": "2026-11-10T18:15:58.926Z" + }, + { + "cveId": "CVE-2026-95920", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95920", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95920.json", + "dateUpdated": "2026-11-10T18:17:11.031Z" + }, + { + "cveId": "CVE-2026-95922", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95922", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95922.json", + "dateUpdated": "2026-11-10T18:15:59.441Z" + }, + { + "cveId": "CVE-2026-95923", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95923", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95923.json", + "dateUpdated": "2026-11-10T18:15:59.986Z" + }, + { + "cveId": "CVE-2026-95932", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95932", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95932.json", + "dateUpdated": "2026-11-10T18:17:11.537Z" + }, + { + "cveId": "CVE-2026-95933", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95933", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95933.json", + "dateUpdated": "2026-11-10T18:16:00.534Z" + }, + { + "cveId": "CVE-2026-95934", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95934", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95934.json", + "dateUpdated": "2026-11-10T18:17:12.058Z" + }, + { + "cveId": "CVE-2026-95935", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95935", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95935.json", + "dateUpdated": "2026-11-10T18:16:01.048Z" + }, + { + "cveId": "CVE-2026-95938", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95938", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95938.json", + "dateUpdated": "2026-11-10T18:16:01.586Z" + }, + { + "cveId": "CVE-2026-95942", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95942", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95942.json", + "dateUpdated": "2026-11-10T18:16:02.557Z" + }, + { + "cveId": "CVE-2026-95944", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95944", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95944.json", + "dateUpdated": "2026-11-10T18:16:03.644Z" + }, + { + "cveId": "CVE-2026-95946", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95946", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95946.json", + "dateUpdated": "2026-11-10T18:16:04.274Z" + }, + { + "cveId": "CVE-2026-95947", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95947", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95947.json", + "dateUpdated": "2026-11-10T18:16:04.856Z" + }, + { + "cveId": "CVE-2026-95948", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95948", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95948.json", + "dateUpdated": "2026-11-10T18:17:12.570Z" + }, + { + "cveId": "CVE-2026-95950", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95950", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95950.json", + "dateUpdated": "2026-11-10T18:16:05.431Z" + }, + { + "cveId": "CVE-2026-95951", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95951", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95951.json", + "dateUpdated": "2026-11-10T18:17:13.099Z" + }, + { + "cveId": "CVE-2026-95953", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95953", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95953.json", + "dateUpdated": "2026-11-10T18:16:06.058Z" + }, + { + "cveId": "CVE-2026-95956", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95956", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95956.json", + "dateUpdated": "2026-11-10T18:17:13.693Z" + }, + { + "cveId": "CVE-2026-95960", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95960", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95960.json", + "dateUpdated": "2026-11-10T18:16:06.677Z" + }, + { + "cveId": "CVE-2026-95961", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95961", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95961.json", + "dateUpdated": "2026-11-10T18:16:07.196Z" + }, + { + "cveId": "CVE-2026-95962", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95962", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95962.json", + "dateUpdated": "2026-11-10T18:17:14.281Z" + }, + { + "cveId": "CVE-2026-95963", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95963", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95963.json", + "dateUpdated": "2026-11-10T18:16:07.726Z" + }, + { + "cveId": "CVE-2026-95964", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95964", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95964.json", + "dateUpdated": "2026-11-10T18:16:08.162Z" + }, + { + "cveId": "CVE-2026-95965", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95965", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95965.json", + "dateUpdated": "2026-11-10T18:17:14.857Z" + }, + { + "cveId": "CVE-2026-95966", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95966", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95966.json", + "dateUpdated": "2026-11-10T18:17:15.298Z" + }, + { + "cveId": "CVE-2026-95968", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95968", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95968.json", + "dateUpdated": "2026-11-10T18:17:15.850Z" + }, + { + "cveId": "CVE-2026-95971", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95971", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95971.json", + "dateUpdated": "2026-11-10T18:16:08.720Z" + }, + { + "cveId": "CVE-2026-95973", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95973", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95973.json", + "dateUpdated": "2026-11-10T18:16:09.246Z" + }, + { + "cveId": "CVE-2026-95974", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95974", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95974.json", + "dateUpdated": "2026-11-10T18:17:16.421Z" + }, + { + "cveId": "CVE-2026-95975", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95975", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95975.json", + "dateUpdated": "2026-11-10T18:16:09.718Z" + }, + { + "cveId": "CVE-2026-95976", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95976", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95976.json", + "dateUpdated": "2026-11-10T18:17:17.040Z" + }, + { + "cveId": "CVE-2026-95977", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95977", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95977.json", + "dateUpdated": "2026-11-10T18:16:10.230Z" + }, + { + "cveId": "CVE-2026-95979", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95979", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95979.json", + "dateUpdated": "2026-11-10T18:16:10.774Z" + }, + { + "cveId": "CVE-2026-95983", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95983", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95983.json", + "dateUpdated": "2026-11-10T18:17:17.642Z" + }, + { + "cveId": "CVE-2026-95987", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95987", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95987.json", + "dateUpdated": "2026-11-10T18:17:18.230Z" + }, + { + "cveId": "CVE-2026-95988", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95988", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95988.json", + "dateUpdated": "2026-11-10T18:17:18.700Z" + }, + { + "cveId": "CVE-2026-95989", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95989", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95989.json", + "dateUpdated": "2026-11-10T18:16:11.431Z" + }, + { + "cveId": "CVE-2026-95991", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95991", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95991.json", + "dateUpdated": "2026-11-10T18:17:19.157Z" + }, + { + "cveId": "CVE-2026-95996", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95996", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95996.json", + "dateUpdated": "2026-11-10T18:17:19.767Z" + }, + { + "cveId": "CVE-2026-95997", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95997", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95997.json", + "dateUpdated": "2026-11-10T18:17:20.387Z" + }, + { + "cveId": "CVE-2026-95998", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95998", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95998.json", + "dateUpdated": "2026-11-10T18:16:11.958Z" + }, + { + "cveId": "CVE-2026-95999", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-95999", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95999.json", + "dateUpdated": "2026-11-10T18:16:12.499Z" + }, + { + "cveId": "CVE-2026-96001", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96001", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96001.json", + "dateUpdated": "2026-11-10T18:16:13.047Z" + }, + { + "cveId": "CVE-2026-96002", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96002", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96002.json", + "dateUpdated": "2026-11-10T18:17:20.920Z" + }, + { + "cveId": "CVE-2026-96004", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96004", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96004.json", + "dateUpdated": "2026-11-10T18:17:21.468Z" + }, + { + "cveId": "CVE-2026-96005", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96005", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96005.json", + "dateUpdated": "2026-11-10T18:16:13.506Z" + }, + { + "cveId": "CVE-2026-96007", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96007", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96007.json", + "dateUpdated": "2026-11-10T18:17:22.106Z" + }, + { + "cveId": "CVE-2026-96008", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96008", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96008.json", + "dateUpdated": "2026-11-10T18:16:14.580Z" + }, + { + "cveId": "CVE-2026-96010", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96010", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96010.json", + "dateUpdated": "2026-11-10T18:16:14.111Z" + }, + { + "cveId": "CVE-2026-96016", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96016", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96016.json", + "dateUpdated": "2026-11-10T18:17:23.138Z" + }, + { + "cveId": "CVE-2026-96017", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96017", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96017.json", + "dateUpdated": "2026-11-10T18:17:23.712Z" + }, + { + "cveId": "CVE-2026-96018", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96018", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96018.json", + "dateUpdated": "2026-11-10T18:16:15.151Z" + }, + { + "cveId": "CVE-2026-96019", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96019", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96019.json", + "dateUpdated": "2026-11-10T18:17:24.265Z" + }, + { + "cveId": "CVE-2026-96020", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96020", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96020.json", + "dateUpdated": "2026-11-10T18:17:22.633Z" + }, + { + "cveId": "CVE-2026-96022", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96022", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96022.json", + "dateUpdated": "2026-11-10T18:17:24.807Z" + }, + { + "cveId": "CVE-2026-96023", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96023", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96023.json", + "dateUpdated": "2026-11-10T18:17:25.398Z" + }, + { + "cveId": "CVE-2026-96026", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96026", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96026.json", + "dateUpdated": "2026-11-10T18:16:15.772Z" + }, + { + "cveId": "CVE-2026-96027", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96027", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96027.json", + "dateUpdated": "2026-11-10T18:17:27.034Z" + }, + { + "cveId": "CVE-2026-96028", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96028", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96028.json", + "dateUpdated": "2026-11-10T18:17:27.633Z" + }, + { + "cveId": "CVE-2026-96029", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96029", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96029.json", + "dateUpdated": "2026-11-10T18:17:25.839Z" + }, + { + "cveId": "CVE-2026-96031", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96031", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96031.json", + "dateUpdated": "2026-11-10T18:16:16.306Z" + }, + { + "cveId": "CVE-2026-96035", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96035", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96035.json", + "dateUpdated": "2026-11-10T18:17:28.184Z" + }, + { + "cveId": "CVE-2026-96036", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96036", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96036.json", + "dateUpdated": "2026-11-10T18:17:28.709Z" + }, + { + "cveId": "CVE-2026-96037", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96037", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96037.json", + "dateUpdated": "2026-11-10T18:17:26.448Z" + }, + { + "cveId": "CVE-2026-96038", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96038", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96038.json", + "dateUpdated": "2026-11-10T18:17:29.222Z" + }, + { + "cveId": "CVE-2026-96041", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96041", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96041.json", + "dateUpdated": "2026-11-10T18:17:29.847Z" + }, + { + "cveId": "CVE-2026-96042", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96042", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96042.json", + "dateUpdated": "2026-11-10T18:17:30.391Z" + }, + { + "cveId": "CVE-2026-96043", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96043", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96043.json", + "dateUpdated": "2026-11-10T18:16:16.836Z" + }, + { + "cveId": "CVE-2026-96046", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96046", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96046.json", + "dateUpdated": "2026-11-10T18:16:17.286Z" + }, + { + "cveId": "CVE-2026-96047", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96047", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96047.json", + "dateUpdated": "2026-11-10T18:16:17.877Z" + }, + { + "cveId": "CVE-2026-96048", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96048", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96048.json", + "dateUpdated": "2026-11-10T18:16:18.485Z" + }, + { + "cveId": "CVE-2026-96051", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96051", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96051.json", + "dateUpdated": "2026-11-10T18:17:30.917Z" + }, + { + "cveId": "CVE-2026-96052", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96052", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96052.json", + "dateUpdated": "2026-11-10T18:16:19.612Z" + }, + { + "cveId": "CVE-2026-96053", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96053", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96053.json", + "dateUpdated": "2026-11-10T18:16:20.204Z" + }, + { + "cveId": "CVE-2026-96054", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96054", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96054.json", + "dateUpdated": "2026-11-10T18:16:19.008Z" + }, + { + "cveId": "CVE-2026-96055", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96055", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96055.json", + "dateUpdated": "2026-11-10T18:17:31.457Z" + }, + { + "cveId": "CVE-2026-96056", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96056", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96056.json", + "dateUpdated": "2026-11-10T18:16:20.717Z" + }, + { + "cveId": "CVE-2026-96057", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96057", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96057.json", + "dateUpdated": "2026-11-10T18:17:31.966Z" + }, + { + "cveId": "CVE-2026-96058", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96058", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96058.json", + "dateUpdated": "2026-11-10T18:16:21.202Z" + }, + { + "cveId": "CVE-2026-96059", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96059", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96059.json", + "dateUpdated": "2026-11-10T18:16:21.735Z" + }, + { + "cveId": "CVE-2026-96060", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96060", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96060.json", + "dateUpdated": "2026-11-10T18:17:32.489Z" + }, + { + "cveId": "CVE-2026-96061", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96061", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96061.json", + "dateUpdated": "2026-11-10T18:17:32.997Z" + }, + { + "cveId": "CVE-2026-96062", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96062", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96062.json", + "dateUpdated": "2026-11-10T18:16:22.254Z" + }, + { + "cveId": "CVE-2026-96064", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96064", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96064.json", + "dateUpdated": "2026-11-10T18:16:22.787Z" + }, + { + "cveId": "CVE-2026-96066", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96066", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96066.json", + "dateUpdated": "2026-11-10T18:16:23.396Z" + }, + { + "cveId": "CVE-2026-96067", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96067", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96067.json", + "dateUpdated": "2026-11-10T18:17:33.530Z" + }, + { + "cveId": "CVE-2026-96072", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96072", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96072.json", + "dateUpdated": "2026-11-10T18:16:23.837Z" + }, + { + "cveId": "CVE-2026-96073", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96073", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96073.json", + "dateUpdated": "2026-11-10T18:17:34.079Z" + }, + { + "cveId": "CVE-2026-96074", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96074", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96074.json", + "dateUpdated": "2026-11-10T18:17:34.539Z" + }, + { + "cveId": "CVE-2026-96075", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96075", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96075.json", + "dateUpdated": "2026-11-10T18:17:35.067Z" + }, + { + "cveId": "CVE-2026-96076", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96076", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96076.json", + "dateUpdated": "2026-11-10T18:17:35.585Z" + }, + { + "cveId": "CVE-2026-96077", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96077", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96077.json", + "dateUpdated": "2026-11-10T18:16:24.277Z" + }, + { + "cveId": "CVE-2026-96078", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96078", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96078.json", + "dateUpdated": "2026-11-10T18:16:24.741Z" + }, + { + "cveId": "CVE-2026-96081", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96081", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96081.json", + "dateUpdated": "2026-11-10T18:16:25.261Z" + }, + { + "cveId": "CVE-2026-96082", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96082", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96082.json", + "dateUpdated": "2026-11-10T18:16:25.709Z" + }, + { + "cveId": "CVE-2026-96084", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96084", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96084.json", + "dateUpdated": "2026-11-10T18:16:26.302Z" + }, + { + "cveId": "CVE-2026-96085", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96085", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96085.json", + "dateUpdated": "2026-11-10T18:16:26.880Z" + }, + { + "cveId": "CVE-2026-96086", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96086", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96086.json", + "dateUpdated": "2026-11-10T18:17:36.098Z" + }, + { + "cveId": "CVE-2026-96088", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96088", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96088.json", + "dateUpdated": "2026-11-10T18:17:36.626Z" + }, + { + "cveId": "CVE-2026-96092", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96092", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96092.json", + "dateUpdated": "2026-11-10T18:17:37.211Z" + }, + { + "cveId": "CVE-2026-96093", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96093", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96093.json", + "dateUpdated": "2026-11-10T18:17:37.736Z" + }, + { + "cveId": "CVE-2026-96097", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96097", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96097.json", + "dateUpdated": "2026-11-10T18:17:38.253Z" + }, + { + "cveId": "CVE-2026-96101", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96101", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96101.json", + "dateUpdated": "2026-11-10T18:16:27.462Z" + }, + { + "cveId": "CVE-2026-96102", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96102", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96102.json", + "dateUpdated": "2026-11-10T18:16:28.078Z" + }, + { + "cveId": "CVE-2026-96103", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96103", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96103.json", + "dateUpdated": "2026-11-10T18:17:39.797Z" + }, + { + "cveId": "CVE-2026-96107", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96107", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96107.json", + "dateUpdated": "2026-11-10T18:17:40.310Z" + }, + { + "cveId": "CVE-2026-96110", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96110", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96110.json", + "dateUpdated": "2026-11-10T18:17:40.823Z" + }, + { + "cveId": "CVE-2026-96112", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96112", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96112.json", + "dateUpdated": "2026-11-10T18:16:28.521Z" + }, + { + "cveId": "CVE-2026-96115", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96115", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96115.json", + "dateUpdated": "2026-11-10T18:16:29.031Z" + }, + { + "cveId": "CVE-2026-96117", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96117", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96117.json", + "dateUpdated": "2026-11-10T18:16:29.481Z" + }, + { + "cveId": "CVE-2026-96122", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96122", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96122.json", + "dateUpdated": "2026-11-10T18:17:41.273Z" + }, + { + "cveId": "CVE-2026-96124", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96124", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96124.json", + "dateUpdated": "2026-11-10T18:17:41.793Z" + }, + { + "cveId": "CVE-2026-96126", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96126", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96126.json", + "dateUpdated": "2026-11-10T18:16:29.997Z" + }, + { + "cveId": "CVE-2026-96127", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96127", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96127.json", + "dateUpdated": "2026-11-10T18:17:42.536Z" + }, + { + "cveId": "CVE-2026-96129", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96129", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96129.json", + "dateUpdated": "2026-11-10T18:16:30.526Z" + }, + { + "cveId": "CVE-2026-96133", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96133", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96133.json", + "dateUpdated": "2026-11-10T18:16:31.032Z" + }, + { + "cveId": "CVE-2026-96134", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96134", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96134.json", + "dateUpdated": "2026-11-10T18:16:31.618Z" + }, + { + "cveId": "CVE-2026-96137", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96137", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96137.json", + "dateUpdated": "2026-11-10T18:16:32.138Z" + }, + { + "cveId": "CVE-2026-96139", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96139", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96139.json", + "dateUpdated": "2026-11-10T18:17:43.156Z" + }, + { + "cveId": "CVE-2026-96144", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96144", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96144.json", + "dateUpdated": "2026-11-10T18:16:32.584Z" + }, + { + "cveId": "CVE-2026-96150", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96150", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96150.json", + "dateUpdated": "2026-11-10T18:16:33.092Z" + }, + { + "cveId": "CVE-2026-96152", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96152", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96152.json", + "dateUpdated": "2026-11-10T18:16:33.546Z" + }, + { + "cveId": "CVE-2026-96153", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96153", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96153.json", + "dateUpdated": "2026-11-10T18:17:43.680Z" + }, + { + "cveId": "CVE-2026-96155", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96155", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96155.json", + "dateUpdated": "2026-11-10T18:17:44.138Z" + }, + { + "cveId": "CVE-2026-96156", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96156", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96156.json", + "dateUpdated": "2026-11-10T18:17:44.676Z" + }, + { + "cveId": "CVE-2026-96157", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96157", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96157.json", + "dateUpdated": "2026-11-10T18:17:45.230Z" + }, + { + "cveId": "CVE-2026-96158", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96158", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96158.json", + "dateUpdated": "2026-11-10T18:16:34.082Z" + }, + { + "cveId": "CVE-2026-96160", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96160", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96160.json", + "dateUpdated": "2026-11-10T18:17:45.791Z" + }, + { + "cveId": "CVE-2026-96162", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96162", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96162.json", + "dateUpdated": "2026-11-10T18:17:46.614Z" + }, + { + "cveId": "CVE-2026-96164", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96164", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96164.json", + "dateUpdated": "2026-11-10T18:16:34.644Z" + }, + { + "cveId": "CVE-2026-96168", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96168", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96168.json", + "dateUpdated": "2026-11-10T18:17:47.158Z" + }, + { + "cveId": "CVE-2026-96171", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96171", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96171.json", + "dateUpdated": "2026-11-10T18:16:35.247Z" + }, + { + "cveId": "CVE-2026-96172", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96172", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96172.json", + "dateUpdated": "2026-11-10T18:17:47.691Z" + }, + { + "cveId": "CVE-2026-96174", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96174", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96174.json", + "dateUpdated": "2026-11-10T18:16:35.851Z" + }, + { + "cveId": "CVE-2026-96175", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96175", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96175.json", + "dateUpdated": "2026-11-10T18:17:48.291Z" + }, + { + "cveId": "CVE-2026-96176", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96176", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96176.json", + "dateUpdated": "2026-11-10T18:16:36.296Z" + }, + { + "cveId": "CVE-2026-96177", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96177", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96177.json", + "dateUpdated": "2026-11-10T18:16:36.814Z" + }, + { + "cveId": "CVE-2026-96179", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96179", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96179.json", + "dateUpdated": "2026-11-10T18:16:37.410Z" + }, + { + "cveId": "CVE-2026-96184", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96184", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96184.json", + "dateUpdated": "2026-11-10T18:16:37.933Z" + }, + { + "cveId": "CVE-2026-96845", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96845", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96845.json", + "dateUpdated": "2026-11-10T18:20:04.474Z" + }, + { + "cveId": "CVE-2026-96965", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96965", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96965.json", + "dateUpdated": "2026-11-10T18:16:41.385Z" + }, + { + "cveId": "CVE-2026-96969", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96969", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96969.json", + "dateUpdated": "2026-11-10T18:17:55.572Z" + }, + { + "cveId": "CVE-2026-96970", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96970", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96970.json", + "dateUpdated": "2026-11-10T18:16:45.295Z" + }, + { + "cveId": "CVE-2026-96971", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96971", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96971.json", + "dateUpdated": "2026-11-10T18:17:55.121Z" + }, + { + "cveId": "CVE-2026-96972", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96972", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96972.json", + "dateUpdated": "2026-11-10T18:16:45.806Z" + }, + { + "cveId": "CVE-2026-96973", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96973", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96973.json", + "dateUpdated": "2026-11-10T18:17:54.075Z" + }, + { + "cveId": "CVE-2026-96974", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96974", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96974.json", + "dateUpdated": "2026-11-10T18:17:51.606Z" + }, + { + "cveId": "CVE-2026-96975", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96975", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96975.json", + "dateUpdated": "2026-11-10T18:17:56.680Z" + }, + { + "cveId": "CVE-2026-96976", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96976", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96976.json", + "dateUpdated": "2026-11-10T18:16:44.773Z" + }, + { + "cveId": "CVE-2026-96978", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96978", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96978.json", + "dateUpdated": "2026-11-10T18:16:40.806Z" + }, + { + "cveId": "CVE-2026-96979", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96979", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96979.json", + "dateUpdated": "2026-11-10T18:17:53.620Z" + }, + { + "cveId": "CVE-2026-96980", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96980", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96980.json", + "dateUpdated": "2026-11-10T18:17:57.277Z" + }, + { + "cveId": "CVE-2026-96981", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96981", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96981.json", + "dateUpdated": "2026-11-10T18:16:43.554Z" + }, + { + "cveId": "CVE-2026-96982", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96982", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96982.json", + "dateUpdated": "2026-11-10T18:17:52.053Z" + }, + { + "cveId": "CVE-2026-96983", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96983", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96983.json", + "dateUpdated": "2026-11-10T18:17:56.099Z" + }, + { + "cveId": "CVE-2026-96984", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96984", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96984.json", + "dateUpdated": "2026-11-10T18:17:58.186Z" + }, + { + "cveId": "CVE-2026-96985", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96985", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96985.json", + "dateUpdated": "2026-11-10T18:17:58.630Z" + }, + { + "cveId": "CVE-2026-96986", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96986", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96986.json", + "dateUpdated": "2026-11-10T18:16:46.400Z" + }, + { + "cveId": "CVE-2026-96987", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96987", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96987.json", + "dateUpdated": "2026-11-10T18:16:46.853Z" + }, + { + "cveId": "CVE-2026-96988", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96988", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96988.json", + "dateUpdated": "2026-11-10T18:16:47.358Z" + }, + { + "cveId": "CVE-2026-96989", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96989", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96989.json", + "dateUpdated": "2026-11-10T18:17:52.581Z" + }, + { + "cveId": "CVE-2026-96992", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96992", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96992.json", + "dateUpdated": "2026-11-10T18:16:44.207Z" + }, + { + "cveId": "CVE-2026-96993", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96993", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96993.json", + "dateUpdated": "2026-11-10T18:16:42.447Z" + }, + { + "cveId": "CVE-2026-96994", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96994", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96994.json", + "dateUpdated": "2026-11-10T18:17:51.161Z" + }, + { + "cveId": "CVE-2026-97000", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97000", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97000.json", + "dateUpdated": "2026-11-10T18:17:53.100Z" + }, + { + "cveId": "CVE-2026-97002", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97002", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97002.json", + "dateUpdated": "2026-11-10T18:17:54.535Z" + }, + { + "cveId": "CVE-2026-97006", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97006", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97006.json", + "dateUpdated": "2026-11-10T18:17:57.728Z" + }, + { + "cveId": "CVE-2026-97013", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97013", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97013.json", + "dateUpdated": "2026-11-10T18:16:41.916Z" + }, + { + "cveId": "CVE-2026-97015", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-97015", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97015.json", + "dateUpdated": "2026-11-10T18:16:42.964Z" + }, + { + "cveId": "CVE-2026-99286", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99286", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99286.json", + "dateUpdated": "2026-11-10T18:16:53.997Z" + }, + { + "cveId": "CVE-2026-99287", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99287", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99287.json", + "dateUpdated": "2026-11-10T18:16:54.253Z" + }, + { + "cveId": "CVE-2026-99288", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99288", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99288.json", + "dateUpdated": "2026-11-10T18:19:08.557Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-122113", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122113", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122113.json", + "dateUpdated": "2026-11-10T18:21:47.077Z" + }, + { + "cveId": "CVE-2026-66982", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66982", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66982.json", + "dateUpdated": "2026-11-10T18:19:41.221Z" + }, + { + "cveId": "CVE-2026-99284", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99284", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99284.json", + "dateUpdated": "2026-11-10T18:15:30.724Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T18:15:30.317Z", + "numberOfChanges": 99, + "new": [ + { + "cveId": "CVE-2026-100204", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100204", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100204.json", + "dateUpdated": "2026-11-10T18:15:06.246Z" + }, + { + "cveId": "CVE-2026-100223", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-100223", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100223.json", + "dateUpdated": "2026-11-10T18:15:26.361Z" + }, + { + "cveId": "CVE-2026-102200", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102200", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102200.json", + "dateUpdated": "2026-11-10T18:15:26.957Z" + }, + { + "cveId": "CVE-2026-102224", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102224", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102224.json", + "dateUpdated": "2026-11-10T18:15:19.386Z" + }, + { + "cveId": "CVE-2026-102236", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102236", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102236.json", + "dateUpdated": "2026-11-10T18:15:18.864Z" + }, + { + "cveId": "CVE-2026-102868", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-102868", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102868.json", + "dateUpdated": "2026-11-10T18:14:59.628Z" + }, + { + "cveId": "CVE-2026-105544", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105544", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105544.json", + "dateUpdated": "2026-11-10T18:15:12.518Z" + }, + { + "cveId": "CVE-2026-105582", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105582", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105582.json", + "dateUpdated": "2026-11-10T18:15:00.565Z" + }, + { + "cveId": "CVE-2026-105583", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105583", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105583.json", + "dateUpdated": "2026-11-10T18:15:01.376Z" + }, + { + "cveId": "CVE-2026-105584", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105584", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105584.json", + "dateUpdated": "2026-11-10T18:15:02.235Z" + }, + { + "cveId": "CVE-2026-105586", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105586", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105586.json", + "dateUpdated": "2026-11-10T18:15:02.770Z" + }, + { + "cveId": "CVE-2026-105587", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105587", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105587.json", + "dateUpdated": "2026-11-10T18:15:03.644Z" + }, + { + "cveId": "CVE-2026-105588", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105588", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105588.json", + "dateUpdated": "2026-11-10T18:15:04.377Z" + }, + { + "cveId": "CVE-2026-105589", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105589", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105589.json", + "dateUpdated": "2026-11-10T18:15:05.031Z" + }, + { + "cveId": "CVE-2026-105590", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105590", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105590.json", + "dateUpdated": "2026-11-10T18:15:05.595Z" + }, + { + "cveId": "CVE-2026-105734", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-105734", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/105xxx/CVE-2026-105734.json", + "dateUpdated": "2026-11-10T18:15:20.440Z" + }, + { + "cveId": "CVE-2026-107496", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-107496", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/107xxx/CVE-2026-107496.json", + "dateUpdated": "2026-11-10T18:14:18.207Z" + }, + { + "cveId": "CVE-2026-108402", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108402", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108402.json", + "dateUpdated": "2026-11-10T18:15:20.959Z" + }, + { + "cveId": "CVE-2026-108403", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108403", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108403.json", + "dateUpdated": "2026-11-10T18:15:08.748Z" + }, + { + "cveId": "CVE-2026-108409", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108409", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108409.json", + "dateUpdated": "2026-11-10T18:15:06.918Z" + }, + { + "cveId": "CVE-2026-108411", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108411", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108411.json", + "dateUpdated": "2026-11-10T18:15:09.383Z" + }, + { + "cveId": "CVE-2026-108414", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108414", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108414.json", + "dateUpdated": "2026-11-10T18:15:29.113Z" + }, + { + "cveId": "CVE-2026-108415", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108415", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108415.json", + "dateUpdated": "2026-11-10T18:15:09.934Z" + }, + { + "cveId": "CVE-2026-108416", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108416", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108416.json", + "dateUpdated": "2026-11-10T18:15:10.463Z" + }, + { + "cveId": "CVE-2026-108417", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108417", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108417.json", + "dateUpdated": "2026-11-10T18:15:07.610Z" + }, + { + "cveId": "CVE-2026-108418", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108418", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108418.json", + "dateUpdated": "2026-11-10T18:15:21.579Z" + }, + { + "cveId": "CVE-2026-108419", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108419", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108419.json", + "dateUpdated": "2026-11-10T18:15:22.023Z" + }, + { + "cveId": "CVE-2026-108424", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108424", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108424.json", + "dateUpdated": "2026-11-10T18:15:08.145Z" + }, + { + "cveId": "CVE-2026-109454", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109454", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109454.json", + "dateUpdated": "2026-11-10T18:15:29.705Z" + }, + { + "cveId": "CVE-2026-109455", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109455", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109455.json", + "dateUpdated": "2026-11-10T18:15:30.155Z" + }, + { + "cveId": "CVE-2026-109462", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109462", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109462.json", + "dateUpdated": "2026-11-10T18:15:19.896Z" + }, + { + "cveId": "CVE-2026-109463", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109463", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109463.json", + "dateUpdated": "2026-11-10T18:15:11.002Z" + }, + { + "cveId": "CVE-2026-109467", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109467", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109467.json", + "dateUpdated": "2026-11-10T18:15:11.466Z" + }, + { + "cveId": "CVE-2026-109475", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109475", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109475.json", + "dateUpdated": "2026-11-10T18:15:22.540Z" + }, + { + "cveId": "CVE-2026-109476", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109476", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109476.json", + "dateUpdated": "2026-11-10T18:15:23.121Z" + }, + { + "cveId": "CVE-2026-109478", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-109478", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/109xxx/CVE-2026-109478.json", + "dateUpdated": "2026-11-10T18:15:23.710Z" + }, + { + "cveId": "CVE-2026-114164", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114164", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114164.json", + "dateUpdated": "2026-11-10T18:15:13.134Z" + }, + { + "cveId": "CVE-2026-114165", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114165", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114165.json", + "dateUpdated": "2026-11-10T18:15:13.574Z" + }, + { + "cveId": "CVE-2026-114166", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114166", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114166.json", + "dateUpdated": "2026-11-10T18:15:14.104Z" + }, + { + "cveId": "CVE-2026-114167", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114167", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114167.json", + "dateUpdated": "2026-11-10T18:15:14.893Z" + }, + { + "cveId": "CVE-2026-114169", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114169", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114169.json", + "dateUpdated": "2026-11-10T18:15:15.498Z" + }, + { + "cveId": "CVE-2026-114170", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-114170", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/114xxx/CVE-2026-114170.json", + "dateUpdated": "2026-11-10T18:15:16.020Z" + }, + { + "cveId": "CVE-2026-125327", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125327", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125327.json", + "dateUpdated": "2026-11-10T18:02:58.722Z" + }, + { + "cveId": "CVE-2026-125328", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125328", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125328.json", + "dateUpdated": "2026-11-10T18:05:20.491Z" + }, + { + "cveId": "CVE-2026-62903", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-62903", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/62xxx/CVE-2026-62903.json", + "dateUpdated": "2026-11-10T18:15:27.546Z" + }, + { + "cveId": "CVE-2026-66801", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-66801", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/66xxx/CVE-2026-66801.json", + "dateUpdated": "2026-11-10T18:15:11.985Z" + }, + { + "cveId": "CVE-2026-83684", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83684", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83684.json", + "dateUpdated": "2026-11-10T18:15:25.923Z" + }, + { + "cveId": "CVE-2026-83894", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-83894", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/83xxx/CVE-2026-83894.json", + "dateUpdated": "2026-11-10T18:15:16.555Z" + }, + { + "cveId": "CVE-2026-84004", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84004", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84004.json", + "dateUpdated": "2026-11-10T18:15:17.524Z" + }, + { + "cveId": "CVE-2026-84005", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-84005", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/84xxx/CVE-2026-84005.json", + "dateUpdated": "2026-11-10T18:15:17.066Z" + }, + { + "cveId": "CVE-2026-85801", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85801", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85801.json", + "dateUpdated": "2026-11-10T18:15:25.327Z" + }, + { + "cveId": "CVE-2026-85838", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85838", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85838.json", + "dateUpdated": "2026-11-10T18:15:28.138Z" + }, + { + "cveId": "CVE-2026-85839", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-85839", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/85xxx/CVE-2026-85839.json", + "dateUpdated": "2026-11-10T18:15:28.588Z" + }, + { + "cveId": "CVE-2026-88176", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-88176", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88176.json", + "dateUpdated": "2026-11-10T18:15:18.109Z" + }, + { + "cveId": "CVE-2026-94511", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94511", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94511.json", + "dateUpdated": "2026-11-10T18:15:24.292Z" + }, + { + "cveId": "CVE-2026-94513", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-94513", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/94xxx/CVE-2026-94513.json", + "dateUpdated": "2026-11-10T18:15:24.809Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-122146", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-122146", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/122xxx/CVE-2026-122146.json", + "dateUpdated": "2026-11-10T18:07:28.974Z" + }, + { + "cveId": "CVE-2026-6245", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-6245", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/6xxx/CVE-2026-6245.json", + "dateUpdated": "2026-11-10T18:14:50.699Z" + }, + { + "cveId": "CVE-2026-89556", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89556", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89556.json", + "dateUpdated": "2026-11-10T18:15:09.542Z" + }, + { + "cveId": "CVE-2026-89866", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-89866", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/89xxx/CVE-2026-89866.json", + "dateUpdated": "2026-11-10T18:15:09.944Z" + }, + { + "cveId": "CVE-2026-92499", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-92499", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/92xxx/CVE-2026-92499.json", + "dateUpdated": "2026-11-10T18:15:10.609Z" + }, + { + "cveId": "CVE-2026-98176", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98176", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98176.json", + "dateUpdated": "2026-11-10T18:15:10.994Z" + }, + { + "cveId": "CVE-2026-98177", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98177", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98177.json", + "dateUpdated": "2026-11-10T18:15:11.582Z" + }, + { + "cveId": "CVE-2026-98180", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98180", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98180.json", + "dateUpdated": "2026-11-10T18:15:11.955Z" + }, + { + "cveId": "CVE-2026-98228", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98228", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98228.json", + "dateUpdated": "2026-11-10T18:15:12.508Z" + }, + { + "cveId": "CVE-2026-98408", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98408", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98408.json", + "dateUpdated": "2026-11-10T18:15:13.267Z" + }, + { + "cveId": "CVE-2026-98439", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98439", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98439.json", + "dateUpdated": "2026-11-10T18:15:13.580Z" + }, + { + "cveId": "CVE-2026-98449", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98449", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98449.json", + "dateUpdated": "2026-11-10T18:15:14.034Z" + }, + { + "cveId": "CVE-2026-98466", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98466", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98466.json", + "dateUpdated": "2026-11-10T18:15:14.388Z" + }, + { + "cveId": "CVE-2026-98674", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98674", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98674.json", + "dateUpdated": "2026-11-10T18:15:14.796Z" + }, + { + "cveId": "CVE-2026-98682", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98682", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98682.json", + "dateUpdated": "2026-11-10T18:15:15.197Z" + }, + { + "cveId": "CVE-2026-98683", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98683", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98683.json", + "dateUpdated": "2026-11-10T18:15:16.478Z" + }, + { + "cveId": "CVE-2026-98684", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98684", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98684.json", + "dateUpdated": "2026-11-10T18:15:17.155Z" + }, + { + "cveId": "CVE-2026-98685", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98685", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98685.json", + "dateUpdated": "2026-11-10T18:15:17.687Z" + }, + { + "cveId": "CVE-2026-98714", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98714", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98714.json", + "dateUpdated": "2026-11-10T18:15:18.111Z" + }, + { + "cveId": "CVE-2026-98715", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98715", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98715.json", + "dateUpdated": "2026-11-10T18:15:18.805Z" + }, + { + "cveId": "CVE-2026-98786", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98786", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98786.json", + "dateUpdated": "2026-11-10T18:15:19.556Z" + }, + { + "cveId": "CVE-2026-98853", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98853", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98853.json", + "dateUpdated": "2026-11-10T18:15:20.032Z" + }, + { + "cveId": "CVE-2026-98863", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98863", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98863.json", + "dateUpdated": "2026-11-10T18:15:20.513Z" + }, + { + "cveId": "CVE-2026-98920", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98920", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98920.json", + "dateUpdated": "2026-11-10T18:15:20.857Z" + }, + { + "cveId": "CVE-2026-98978", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98978", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98978.json", + "dateUpdated": "2026-11-10T18:15:21.525Z" + }, + { + "cveId": "CVE-2026-98989", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98989", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98989.json", + "dateUpdated": "2026-11-10T18:15:21.865Z" + }, + { + "cveId": "CVE-2026-98996", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-98996", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98996.json", + "dateUpdated": "2026-11-10T18:15:22.209Z" + }, + { + "cveId": "CVE-2026-99021", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99021", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99021.json", + "dateUpdated": "2026-11-10T18:15:22.599Z" + }, + { + "cveId": "CVE-2026-99026", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99026", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99026.json", + "dateUpdated": "2026-11-10T18:15:22.929Z" + }, + { + "cveId": "CVE-2026-99076", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99076", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99076.json", + "dateUpdated": "2026-11-10T18:15:23.412Z" + }, + { + "cveId": "CVE-2026-99086", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99086", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99086.json", + "dateUpdated": "2026-11-10T18:15:23.819Z" + }, + { + "cveId": "CVE-2026-99087", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99087", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99087.json", + "dateUpdated": "2026-11-10T18:15:24.425Z" + }, + { + "cveId": "CVE-2026-99109", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99109", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99109.json", + "dateUpdated": "2026-11-10T18:15:24.796Z" + }, + { + "cveId": "CVE-2026-99122", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99122", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99122.json", + "dateUpdated": "2026-11-10T18:15:25.472Z" + }, + { + "cveId": "CVE-2026-99146", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99146", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99146.json", + "dateUpdated": "2026-11-10T18:15:25.826Z" + }, + { + "cveId": "CVE-2026-99172", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99172", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99172.json", + "dateUpdated": "2026-11-10T18:15:26.226Z" + }, + { + "cveId": "CVE-2026-99270", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99270", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99270.json", + "dateUpdated": "2026-11-10T18:15:26.715Z" + }, + { + "cveId": "CVE-2026-99271", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99271", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99271.json", + "dateUpdated": "2026-11-10T18:15:27.042Z" + }, + { + "cveId": "CVE-2026-99273", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99273", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99273.json", + "dateUpdated": "2026-11-10T18:15:27.637Z" + }, + { + "cveId": "CVE-2026-99274", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99274", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99274.json", + "dateUpdated": "2026-11-10T18:15:27.974Z" + }, + { + "cveId": "CVE-2026-99281", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99281", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99281.json", + "dateUpdated": "2026-11-10T18:15:28.611Z" + }, + { + "cveId": "CVE-2026-99282", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99282", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99282.json", + "dateUpdated": "2026-11-10T18:15:29.554Z" + }, + { + "cveId": "CVE-2026-99283", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-99283", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/99xxx/CVE-2026-99283.json", + "dateUpdated": "2026-11-10T18:15:30.084Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T18:02:04.461Z", + "numberOfChanges": 38, + "new": [ + { + "cveId": "CVE-2026-125325", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125325", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125325.json", + "dateUpdated": "2026-11-10T17:58:40.428Z" + }, + { + "cveId": "CVE-2026-125326", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125326", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125326.json", + "dateUpdated": "2026-11-10T18:01:18.698Z" + }, + { + "cveId": "CVE-2026-79914", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-79914", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/79xxx/CVE-2026-79914.json", + "dateUpdated": "2026-11-10T17:56:36.594Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-123312", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123312", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123312.json", + "dateUpdated": "2026-11-10T17:57:05.944Z" + }, + { + "cveId": "CVE-2026-123493", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123493", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123493.json", + "dateUpdated": "2026-11-10T18:00:36.650Z" + }, + { + "cveId": "CVE-2026-123497", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123497", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123497.json", + "dateUpdated": "2026-11-10T18:00:30.008Z" + }, + { + "cveId": "CVE-2026-123501", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123501", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123501.json", + "dateUpdated": "2026-11-10T18:00:23.557Z" + }, + { + "cveId": "CVE-2026-123505", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123505", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123505.json", + "dateUpdated": "2026-11-10T18:00:17.615Z" + }, + { + "cveId": "CVE-2026-123509", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123509", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123509.json", + "dateUpdated": "2026-11-10T18:00:10.959Z" + }, + { + "cveId": "CVE-2026-123513", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123513", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123513.json", + "dateUpdated": "2026-11-10T17:59:59.119Z" + }, + { + "cveId": "CVE-2026-123517", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123517", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123517.json", + "dateUpdated": "2026-11-10T17:59:52.297Z" + }, + { + "cveId": "CVE-2026-123521", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123521", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123521.json", + "dateUpdated": "2026-11-10T17:59:46.065Z" + }, + { + "cveId": "CVE-2026-123525", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123525", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123525.json", + "dateUpdated": "2026-11-10T17:59:39.099Z" + }, + { + "cveId": "CVE-2026-123529", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123529", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123529.json", + "dateUpdated": "2026-11-10T17:59:32.428Z" + }, + { + "cveId": "CVE-2026-123533", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123533", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123533.json", + "dateUpdated": "2026-11-10T17:59:25.756Z" + }, + { + "cveId": "CVE-2026-123537", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123537", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123537.json", + "dateUpdated": "2026-11-10T17:59:19.285Z" + }, + { + "cveId": "CVE-2026-123541", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123541", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123541.json", + "dateUpdated": "2026-11-10T17:59:12.684Z" + }, + { + "cveId": "CVE-2026-123545", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123545", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123545.json", + "dateUpdated": "2026-11-10T17:59:04.487Z" + }, + { + "cveId": "CVE-2026-123553", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123553", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123553.json", + "dateUpdated": "2026-11-10T17:58:53.625Z" + }, + { + "cveId": "CVE-2026-123557", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123557", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123557.json", + "dateUpdated": "2026-11-10T17:58:43.746Z" + }, + { + "cveId": "CVE-2026-123561", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123561", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123561.json", + "dateUpdated": "2026-11-10T17:58:35.941Z" + }, + { + "cveId": "CVE-2026-123565", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123565", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123565.json", + "dateUpdated": "2026-11-10T17:58:28.362Z" + }, + { + "cveId": "CVE-2026-123569", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123569", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123569.json", + "dateUpdated": "2026-11-10T17:58:20.402Z" + }, + { + "cveId": "CVE-2026-123573", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123573", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123573.json", + "dateUpdated": "2026-11-10T17:58:09.934Z" + }, + { + "cveId": "CVE-2026-123577", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123577", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123577.json", + "dateUpdated": "2026-11-10T17:57:57.905Z" + }, + { + "cveId": "CVE-2026-123581", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123581", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123581.json", + "dateUpdated": "2026-11-10T17:57:50.919Z" + }, + { + "cveId": "CVE-2026-123585", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123585", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123585.json", + "dateUpdated": "2026-11-10T17:57:43.009Z" + }, + { + "cveId": "CVE-2026-123589", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123589", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123589.json", + "dateUpdated": "2026-11-10T17:57:34.802Z" + }, + { + "cveId": "CVE-2026-123593", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123593", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123593.json", + "dateUpdated": "2026-11-10T17:57:27.374Z" + }, + { + "cveId": "CVE-2026-123597", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123597", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123597.json", + "dateUpdated": "2026-11-10T17:57:17.487Z" + }, + { + "cveId": "CVE-2026-123601", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123601", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123601.json", + "dateUpdated": "2026-11-10T17:57:10.157Z" + }, + { + "cveId": "CVE-2026-123605", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123605", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123605.json", + "dateUpdated": "2026-11-10T17:56:59.926Z" + }, + { + "cveId": "CVE-2026-123609", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123609", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123609.json", + "dateUpdated": "2026-11-10T17:56:51.627Z" + }, + { + "cveId": "CVE-2026-123613", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123613", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123613.json", + "dateUpdated": "2026-11-10T17:56:44.483Z" + }, + { + "cveId": "CVE-2026-124329", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124329", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124329.json", + "dateUpdated": "2026-11-10T17:56:30.290Z" + }, + { + "cveId": "CVE-2026-124422", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124422", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124422.json", + "dateUpdated": "2026-11-10T17:56:37.271Z" + }, + { + "cveId": "CVE-2026-124431", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124431", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124431.json", + "dateUpdated": "2026-11-10T17:56:23.693Z" + }, + { + "cveId": "CVE-2026-124435", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124435", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124435.json", + "dateUpdated": "2026-11-10T17:56:16.641Z" + } + ], + "error": [] + }, + { + "fetchTime": "2026-11-10T17:56:12.655Z", + "numberOfChanges": 36, + "new": [ + { + "cveId": "CVE-2026-125323", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-125323", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/125xxx/CVE-2026-125323.json", + "dateUpdated": "2026-11-10T17:52:28.455Z" + } + ], + "updated": [ + { + "cveId": "CVE-2026-121611", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-121611", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/121xxx/CVE-2026-121611.json", + "dateUpdated": "2026-11-10T17:51:12.207Z" + }, + { + "cveId": "CVE-2026-123287", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123287", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123287.json", + "dateUpdated": "2026-11-10T17:55:30.334Z" + }, + { + "cveId": "CVE-2026-123310", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123310", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123310.json", + "dateUpdated": "2026-11-10T17:54:25.381Z" + }, + { + "cveId": "CVE-2026-123313", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123313", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123313.json", + "dateUpdated": "2026-11-10T17:53:46.229Z" + }, + { + "cveId": "CVE-2026-123315", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123315", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123315.json", + "dateUpdated": "2026-11-10T17:52:54.868Z" + }, + { + "cveId": "CVE-2026-123318", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-123318", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/123xxx/CVE-2026-123318.json", + "dateUpdated": "2026-11-10T17:51:53.160Z" + }, + { + "cveId": "CVE-2026-124439", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124439", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124439.json", + "dateUpdated": "2026-11-10T17:56:09.497Z" + }, + { + "cveId": "CVE-2026-124443", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124443", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124443.json", + "dateUpdated": "2026-11-10T17:56:00.671Z" + }, + { + "cveId": "CVE-2026-124447", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124447", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124447.json", + "dateUpdated": "2026-11-10T17:55:49.992Z" + }, + { + "cveId": "CVE-2026-124451", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124451", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124451.json", + "dateUpdated": "2026-11-10T17:55:37.521Z" + }, + { + "cveId": "CVE-2026-124456", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124456", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124456.json", + "dateUpdated": "2026-11-10T17:55:24.107Z" + }, + { + "cveId": "CVE-2026-124460", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124460", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124460.json", + "dateUpdated": "2026-11-10T17:55:13.327Z" + }, + { + "cveId": "CVE-2026-124464", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124464", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124464.json", + "dateUpdated": "2026-11-10T17:55:00.043Z" + }, + { + "cveId": "CVE-2026-124469", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124469", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124469.json", + "dateUpdated": "2026-11-10T17:54:49.624Z" + }, + { + "cveId": "CVE-2026-124473", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124473", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124473.json", + "dateUpdated": "2026-11-10T17:54:37.240Z" + }, + { + "cveId": "CVE-2026-124478", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124478", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124478.json", + "dateUpdated": "2026-11-10T17:54:27.521Z" + }, + { + "cveId": "CVE-2026-124482", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124482", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124482.json", + "dateUpdated": "2026-11-10T17:54:17.439Z" + }, + { + "cveId": "CVE-2026-124486", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124486", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124486.json", + "dateUpdated": "2026-11-10T17:54:06.728Z" + }, + { + "cveId": "CVE-2026-124490", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124490", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124490.json", + "dateUpdated": "2026-11-10T17:53:53.764Z" + }, + { + "cveId": "CVE-2026-124494", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124494", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124494.json", + "dateUpdated": "2026-11-10T17:53:45.128Z" + }, + { + "cveId": "CVE-2026-124499", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124499", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124499.json", + "dateUpdated": "2026-11-10T17:53:18.158Z" + }, + { + "cveId": "CVE-2026-124504", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124504", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124504.json", + "dateUpdated": "2026-11-10T17:53:10.249Z" + }, + { + "cveId": "CVE-2026-124508", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124508", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124508.json", + "dateUpdated": "2026-11-10T17:52:58.371Z" + }, + { + "cveId": "CVE-2026-124552", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124552", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124552.json", + "dateUpdated": "2026-11-10T17:53:35.739Z" + }, + { + "cveId": "CVE-2026-124556", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124556", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124556.json", + "dateUpdated": "2026-11-10T17:52:48.497Z" + }, + { + "cveId": "CVE-2026-124561", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124561", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124561.json", + "dateUpdated": "2026-11-10T17:52:34.534Z" + }, + { + "cveId": "CVE-2026-124565", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124565", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124565.json", + "dateUpdated": "2026-11-10T17:52:14.959Z" + }, + { + "cveId": "CVE-2026-124569", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124569", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124569.json", + "dateUpdated": "2026-11-10T17:52:03.954Z" + }, + { + "cveId": "CVE-2026-124573", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124573", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124573.json", + "dateUpdated": "2026-11-10T17:51:50.127Z" + }, + { + "cveId": "CVE-2026-124581", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124581", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124581.json", + "dateUpdated": "2026-11-10T17:51:40.940Z" + }, + { + "cveId": "CVE-2026-124586", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124586", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124586.json", + "dateUpdated": "2026-11-10T17:51:34.077Z" + }, + { + "cveId": "CVE-2026-124590", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124590", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124590.json", + "dateUpdated": "2026-11-10T17:51:26.986Z" + }, + { + "cveId": "CVE-2026-124622", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124622", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124622.json", + "dateUpdated": "2026-11-10T17:51:20.053Z" + }, + { + "cveId": "CVE-2026-124635", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-124635", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/124xxx/CVE-2026-124635.json", + "dateUpdated": "2026-11-10T17:51:04.330Z" + }, + { + "cveId": "CVE-2026-96146", + "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-96146", + "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/96xxx/CVE-2026-96146.json", + "dateUpdated": "2026-11-10T17:53:27.847Z" + } + ], + "error": [] + }, { "fetchTime": "2026-11-10T17:50:26.673Z", "numberOfChanges": 71, @@ -775334,40 +782798,5 @@ ], "updated": [], "error": [] - }, - { - "fetchTime": "2026-10-11T18:26:50.386Z", - "numberOfChanges": 2, - "new": [ - { - "cveId": "CVE-2026-108925", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-108925", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108925.json", - "dateUpdated": "2026-10-11T18:11:27.584Z" - } - ], - "updated": [ - { - "cveId": "CVE-2026-79992", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-79992", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/79xxx/CVE-2026-79992.json", - "dateUpdated": "2026-10-11T18:09:42.327Z" - } - ], - "error": [] - }, - { - "fetchTime": "2026-10-11T17:56:02.516Z", - "numberOfChanges": 1, - "new": [ - { - "cveId": "CVE-2026-59508", - "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2026-59508", - "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/59xxx/CVE-2026-59508.json", - "dateUpdated": "2026-10-11T17:51:21.655Z" - } - ], - "updated": [], - "error": [] } ] \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index aa2e4eaab0..843edabace 100644 --- a/state/sync.json +++ b/state/sync.json @@ -1,7 +1,7 @@ { "source": "https://github.com/CVEProject/cvelistV5.git", - "upstream_commit": "9e6a5aa08e00dacc07e1d2a5803c7d385abf1733", + "upstream_commit": "63067d88edeceb2002834d5648fefd3cb006633c", "since_year": 2017, - "records": 329157, - "synced_at_utc": "2026-11-10T17:58:29.685393+00:00" + "records": 330267, + "synced_at_utc": "2026-11-10T18:46:20.434957+00:00" }